last executing test programs: 15m31.96285666s ago: executing program 2 (id=3551): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7060000000000008500000017000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x86}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xb, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000000000000d602000000000000ff7f000000000000fd0a0000000000000a00000000000c0080000040000000000000008004000000a601f500400000000800000000000000"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r6, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000001600)=""/239, 0xef}], 0x2, 0x5, 0x101, 0x1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) 15m31.435408104s ago: executing program 2 (id=3553): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 15m29.758027273s ago: executing program 2 (id=3557): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) 15m29.479205371s ago: executing program 2 (id=3560): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 15m27.600694254s ago: executing program 2 (id=3566): ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) 15m25.800349999s ago: executing program 2 (id=3572): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7, @none, 0xb8}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/123) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRESHEX=r1], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003a40), 0x41, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000000)={0x6, 0x801}) setresuid(0x0, 0xee01, 0x0) msgget(0x2, 0x600) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000080001"], 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "04a62017b7421ef0", "91afd49d1b011dd7230564ce1b563e0b", "02d8b971", "dd9b5b89d8c22232"}, 0x28) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000340)='-', 0x1}], 0x1) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) 15m10.561348491s ago: executing program 32 (id=3572): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7, @none, 0xb8}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/123) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRESHEX=r1], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003a40), 0x41, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000000)={0x6, 0x801}) setresuid(0x0, 0xee01, 0x0) msgget(0x2, 0x600) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000080001"], 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "04a62017b7421ef0", "91afd49d1b011dd7230564ce1b563e0b", "02d8b971", "dd9b5b89d8c22232"}, 0x28) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000340)='-', 0x1}], 0x1) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) 13.893265893s ago: executing program 0 (id=6436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) 13.183471794s ago: executing program 4 (id=6438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 12.943044051s ago: executing program 4 (id=6440): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff5", 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a", 0x2ef}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.91817883s ago: executing program 0 (id=6441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.84402286s ago: executing program 4 (id=6444): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) 11.838121059s ago: executing program 0 (id=6445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_setup(0x6, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = semget$private(0x0, 0x4000000009, 0x208) semop(r6, &(0x7f0000000140)=[{0x0, 0x200, 0x1800}], 0x1) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r7, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10.314061113s ago: executing program 0 (id=6446): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[], 0x0, 0x39, 0x0, 0x1}, 0x28) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 10.095978053s ago: executing program 0 (id=6448): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2a, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x0, 0x20, 0x2c}, {@in=@loopback, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x7, 0x8, 0x2, 0x3, 0x40, 0x2, 0x77, 0x7fffffffffffffff}, {0x4, 0x2, 0x8, 0x7fffffff}, {0x4, 0x2}, 0x70bd2d, 0x3505, 0xa, 0x4, 0xac}, 0x2, 0x9}}, 0xf8}}, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) clock_settime(0x0, &(0x7f0000000240)) 8.789325849s ago: executing program 3 (id=6450): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.385580202s ago: executing program 0 (id=6452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e76, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3}, @tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xc, 0x9, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300000000000020001280080001006774700014000280", @ANYBLOB], 0x40}}, 0x8080) 8.324542549s ago: executing program 5 (id=6454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r1, 0x0, 0x3}, 0x18) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 8.140634669s ago: executing program 5 (id=6455): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff5", 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2ef}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.209096832s ago: executing program 5 (id=6456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000014000100e3ffffff00000000020000ff", @ANYRES32=r2, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}}}, 0x24}}, 0x0) 7.194964766s ago: executing program 3 (id=6457): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 6.898972326s ago: executing program 5 (id=6458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x82, 0x0, 0x0, 0xff81, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0xd, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x4, 0xffffb1a8}, 0x10, 0x2236b, r0, 0x4, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x1, 0x1, 0x5}, {0x3, 0x3, 0x6, 0x9}, {0x4, 0x2, 0x8, 0x9}, {0x5, 0x1, 0x5, 0xc}]}, 0x94) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40025b0c, &(0x7f0000000040)) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xe20c2, 0x10, 0x15}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 6.897556002s ago: executing program 3 (id=6459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 6.347954848s ago: executing program 1 (id=6460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x82, 0x0, 0x0, 0xff81, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0xd, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x4, 0xffffb1a8}, 0x10, 0x2236b, r0, 0x4, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x1, 0x1, 0x5}, {0x3, 0x3, 0x6, 0x9}, {0x4, 0x2, 0x8, 0x9}, {0x5, 0x1, 0x5, 0xc}]}, 0x94) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40025b0c, &(0x7f0000000040)) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xe20c2, 0x10, 0x15}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 4.840836141s ago: executing program 5 (id=6461): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x5) write(r1, &(0x7f0000000240)="94", 0x1) close(r4) tee(r0, r5, 0x8f5, 0x0) write$binfmt_script(r5, 0x0, 0xd9) write(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x4}) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r7, &(0x7f0000001f00)=""/4111, 0x100f) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201010001018610f4205ae06d6c010203010902240601012c00000904690202ff5aa30009050402100000fa000905820242", @ANYBLOB="9f416e2b2099b18bd1f6cc6071ce2771e4a09a5cb0db94ff450971467321e9819b09fa9c78567dcb23f9dfca10a1ec96e5f738598356cf4947b75060acce221af7f3", @ANYRESDEC], 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x11) 4.796017895s ago: executing program 3 (id=6462): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x10, 0xd, 0x2, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0x14853, 0x400000}}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(0x0, 0x0) fstat(r2, &(0x7f0000000780)) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="5d4e2e46a0b2", 0x0, 0x8, 0x0, 0x0, 0x0}) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980", 0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 4.67516934s ago: executing program 1 (id=6463): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837", 0x15, r0) 4.126432877s ago: executing program 1 (id=6464): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 4.037018427s ago: executing program 4 (id=6465): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x2c0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x27, 0x803, 0xfffffffc) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x4, 0x2800, 0x27fd, 0x2, 0xba2, 0x28, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001300)='7', 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000046000000c0ff0000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r8 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 3.687327555s ago: executing program 3 (id=6466): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2a, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x0, 0x20, 0x2c}, {@in=@loopback, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x7, 0x8, 0x2, 0x3, 0x40, 0x2, 0x77, 0x7fffffffffffffff}, {0x4, 0x2, 0x8, 0x7fffffff}, {0x4, 0x2}, 0x70bd2d, 0x3505, 0xa, 0x4, 0xac}, 0x2, 0x9}}, 0xf8}}, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) clock_settime(0x0, &(0x7f0000000240)) 3.191728525s ago: executing program 1 (id=6467): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff50013", 0x6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2ef}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.736144544s ago: executing program 3 (id=6468): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) socket$packet(0x11, 0x3, 0x300) pread64(r0, &(0x7f0000000340)=""/197, 0xc5, 0x401) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) getpgrp(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 2.146519724s ago: executing program 1 (id=6469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000014000100e3ffffff00000000020000ff", @ANYRES32=r2, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}}}, 0x24}}, 0x0) 2.069858408s ago: executing program 4 (id=6470): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r3) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) dup(0xffffffffffffffff) 1.832066459s ago: executing program 1 (id=6471): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) creat(0x0, 0x19f) creat(0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 1.005059453s ago: executing program 4 (id=6472): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 5 (id=6473): r0 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x28}, &(0x7f00000001c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r6, 0x1) kernel console output (not intermixed with test programs): terface 0 claimed by hub while 'syz.5.5139' sets config #1 [ 1405.015953][T24958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5147'. [ 1405.573283][T24973] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.5152' sets config #1 [ 1405.622678][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1405.827848][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1405.835730][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.847875][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1405.925626][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1405.935845][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.008346][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1406.034194][ T24] usb 2-1: Product: syz [ 1406.051948][ T24] usb 2-1: Manufacturer: syz [ 1406.073338][ T24] usb 2-1: SerialNumber: syz [ 1406.084096][ T24] usb 2-1: config 0 descriptor?? [ 1406.299577][ T5981] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1406.457281][ T5981] usb 4-1: Using ep0 maxpacket: 16 [ 1406.596303][ T5981] usb 4-1: config 0 has no interfaces? [ 1406.672650][ T5981] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1407.025618][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.036527][ T5981] usb 4-1: Product: syz [ 1407.041096][ T5981] usb 4-1: Manufacturer: syz [ 1407.045971][ T5981] usb 4-1: SerialNumber: syz [ 1407.064310][ T5981] usb 4-1: config 0 descriptor?? [ 1407.288209][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1407.421677][T24992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24992 comm=syz.4.5157 [ 1407.929992][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1408.284267][T18318] usb 2-1: USB disconnect, device number 49 [ 1408.567730][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1409.060243][T18318] usb 4-1: USB disconnect, device number 57 [ 1409.349005][T25017] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5161'. [ 1410.079963][T25025] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5163' sets config #1 [ 1410.645346][T25036] random: crng reseeded on system resumption [ 1411.161074][T25024] lo speed is unknown, defaulting to 1000 [ 1411.354741][T25043] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1411.363043][T25043] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1411.371736][T25043] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1411.827474][T25024] usb usb8: usbfs: process 25024 (syz.3.5162) did not claim interface 0 before use [ 1412.011517][T25051] tipc: Enabled bearer , priority 0 [ 1412.102366][T25051] tipc: Resetting bearer [ 1412.141282][T25052] syzkaller0: entered promiscuous mode [ 1412.227294][T25052] syzkaller0: entered allmulticast mode [ 1412.411721][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1412.421905][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1412.431993][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1412.544202][T25050] tipc: Resetting bearer [ 1412.750662][T25050] tipc: Disabling bearer [ 1413.047599][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1413.319973][T25064] random: crng reseeded on system resumption [ 1413.687793][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1413.997404][ T5981] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1414.109671][T25076] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1414.118830][T25076] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1414.128063][T25076] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1414.180724][ T5981] usb 4-1: Using ep0 maxpacket: 16 [ 1414.188028][ T5981] usb 4-1: config 0 has no interfaces? [ 1414.200988][ T5981] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1414.215222][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.323891][ T5981] usb 4-1: Product: syz [ 1414.375207][ T5981] usb 4-1: Manufacturer: syz [ 1414.385987][ T5981] usb 4-1: SerialNumber: syz [ 1414.467851][ T5981] usb 4-1: config 0 descriptor?? [ 1414.727184][T25084] IPv6: syztnl1: Disabled Multicast RS [ 1414.796924][T25084] random: crng reseeded on system resumption [ 1416.061985][T25101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5179'. [ 1416.140662][T25100] tipc: Enabled bearer , priority 0 [ 1416.149881][T25100] syzkaller0: entered promiscuous mode [ 1416.155468][T25100] syzkaller0: entered allmulticast mode [ 1416.166626][T25100] tipc: Resetting bearer [ 1416.179671][T25099] tipc: Resetting bearer [ 1416.256961][ T1621] usb 4-1: USB disconnect, device number 58 [ 1416.257228][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1416.294284][T25099] tipc: Disabling bearer [ 1416.565830][T25115] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1416.579245][T25115] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1416.589097][T25115] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1416.933159][T25124] netlink: 'syz.5.5186': attribute type 2 has an invalid length. [ 1416.941466][T25124] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5186'. [ 1417.530550][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1417.540706][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1417.557437][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1417.799791][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1417.896834][ T24] usb 6-1: config 0 has no interfaces? [ 1417.947162][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1418.004724][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.073992][ T24] usb 6-1: Product: syz [ 1418.084899][ T24] usb 6-1: Manufacturer: syz [ 1418.104431][ T24] usb 6-1: SerialNumber: syz [ 1418.119046][ T24] usb 6-1: config 0 descriptor?? [ 1418.168091][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1419.055356][T25138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5189'. [ 1419.586737][T25147] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.5192' sets config #1 [ 1420.886539][ T1621] usb 6-1: USB disconnect, device number 26 [ 1421.124872][T25163] netlink: 'syz.5.5196': attribute type 2 has an invalid length. [ 1421.132823][T25163] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5196'. [ 1421.467200][ T6010] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1421.523534][T25170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5198'. [ 1421.646508][T25174] netlink: 'syz.3.5199': attribute type 2 has an invalid length. [ 1421.654431][T25174] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5199'. [ 1421.719995][ T6010] usb 6-1: Using ep0 maxpacket: 32 [ 1421.744989][ T6010] usb 6-1: config 0 has no interfaces? [ 1421.766031][ T6010] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1421.877357][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.917202][ T6010] usb 6-1: Product: syz [ 1421.934282][ T6010] usb 6-1: Manufacturer: syz [ 1421.947257][ T1621] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1421.957418][ T6010] usb 6-1: SerialNumber: syz [ 1422.051933][ T6010] usb 6-1: config 0 descriptor?? [ 1422.087689][ T1621] usb 4-1: device descriptor read/64, error -71 [ 1422.347211][ T1621] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1422.653214][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1422.663816][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1422.673925][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1422.683981][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1422.775577][T25187] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5202' sets config #1 [ 1423.058547][ T1621] usb 4-1: device descriptor read/64, error -71 [ 1423.187394][ T1621] usb usb4-port1: attempt power cycle [ 1423.919067][ T1621] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1423.927674][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1423.977032][ T1621] usb 4-1: device descriptor read/8, error -71 [ 1424.087909][T17745] usb 6-1: USB disconnect, device number 27 [ 1424.309419][ T1621] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1424.580166][ T1621] usb 4-1: device descriptor read/8, error -71 [ 1424.737701][ T1621] usb usb4-port1: unable to enumerate USB device [ 1427.112389][T25227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5213'. [ 1427.347427][T18318] libceph: connect (1)[c::]:6789 error -101 [ 1427.367386][T18318] libceph: mon0 (1)[c::]:6789 connect error [ 1427.383806][T18318] libceph: connect (1)[c::]:6789 error -101 [ 1427.389931][T18318] libceph: mon0 (1)[c::]:6789 connect error [ 1427.648045][T18318] libceph: connect (1)[c::]:6789 error -101 [ 1427.767351][T18318] libceph: mon0 (1)[c::]:6789 connect error [ 1427.772108][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1427.784156][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1427.794293][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1427.804443][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1428.074202][T25246] netlink: 'syz.4.5217': attribute type 2 has an invalid length. [ 1428.082067][T25246] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1428.237410][ T24] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1428.399700][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1428.412700][ T1621] libceph: connect (1)[c::]:6789 error -101 [ 1428.423529][T25229] ceph: No mds server is up or the cluster is laggy [ 1428.438908][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.454305][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1428.463802][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.475061][ T24] usb 1-1: Product: syz [ 1428.484975][ T24] usb 1-1: Manufacturer: syz [ 1428.497389][ T1621] libceph: mon0 (1)[c::]:6789 connect error [ 1428.526679][ T24] usb 1-1: SerialNumber: syz [ 1428.551230][ T24] usb 1-1: config 0 descriptor?? [ 1428.830059][T25254] lo speed is unknown, defaulting to 1000 [ 1429.008803][T25260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1429.046115][T25254] usb usb8: usbfs: process 25254 (syz.1.5220) did not claim interface 0 before use [ 1430.323529][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1430.330923][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1431.254523][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1431.287411][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1431.395147][ T6010] usb 1-1: USB disconnect, device number 63 [ 1431.437784][T25278] ceph: No mds server is up or the cluster is laggy [ 1431.817555][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1431.834335][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1432.063476][T25294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5227'. [ 1432.480642][T25300] random: crng reseeded on system resumption [ 1432.892579][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1432.903087][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1432.913188][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1432.923312][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1432.933804][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.888868][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5228'. [ 1433.897942][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5228'. [ 1435.251883][T25322] random: crng reseeded on system resumption [ 1436.186282][T25324] random: crng reseeded on system resumption [ 1438.012437][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.022568][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.032655][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.042716][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.053109][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.063168][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.073286][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.083405][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.086320][T25335] random: crng reseeded on system resumption [ 1438.093505][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1438.136382][T25339] netlink: 'syz.3.5238': attribute type 2 has an invalid length. [ 1438.144303][T25339] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5238'. [ 1438.411850][T25343] fuse: Bad value for 'fd' [ 1438.448200][T18318] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1439.208070][T18318] usb 4-1: Using ep0 maxpacket: 32 [ 1439.247805][T18318] usb 4-1: config 0 has no interfaces? [ 1439.315399][T18318] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1439.430810][T18318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.456859][T18318] usb 4-1: Product: syz [ 1439.497969][T25358] netlink: 'syz.0.5244': attribute type 3 has an invalid length. [ 1439.505781][T25358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5244'. [ 1439.539780][T18318] usb 4-1: Manufacturer: syz [ 1439.562308][T18318] usb 4-1: SerialNumber: syz [ 1439.693469][T18318] usb 4-1: config 0 descriptor?? [ 1441.217187][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1441.411851][ T5958] usb 4-1: USB disconnect, device number 63 [ 1441.678101][T25379] random: crng reseeded on system resumption [ 1442.671088][T25387] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5251'. [ 1442.722416][ T30] audit: type=1326 audit(1756679649.195:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1442.774574][ T30] audit: type=1326 audit(1756679649.195:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1442.858986][ T30] audit: type=1326 audit(1756679649.195:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1443.035739][ T5981] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1443.087423][ T30] audit: type=1326 audit(1756679649.295:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1443.130923][ C1] sctp_transport_update_pmtu: 1 callbacks suppressed [ 1443.130941][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1443.147802][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1443.158067][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1443.168180][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1443.178519][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1443.210099][ T30] audit: type=1326 audit(1756679649.295:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1443.233755][ T30] audit: type=1326 audit(1756679649.295:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1443.257456][ T30] audit: type=1326 audit(1756679649.345:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25381 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1443.352492][ T5981] usb 2-1: Using ep0 maxpacket: 32 [ 1443.751895][ T5981] usb 2-1: config 0 has no interfaces? [ 1443.780713][ T5981] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1443.872502][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.019023][ T5981] usb 2-1: Product: syz [ 1444.023204][ T5981] usb 2-1: Manufacturer: syz [ 1444.036725][ T5981] usb 2-1: SerialNumber: syz [ 1444.068000][ T5981] usb 2-1: config 0 descriptor?? [ 1445.878340][ T5981] usb 2-1: USB disconnect, device number 50 [ 1446.447373][T25421] random: crng reseeded on system resumption [ 1447.289511][T25423] fuse: Unknown parameter './file0' [ 1447.761043][T25434] random: crng reseeded on system resumption [ 1448.251055][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1448.261158][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1448.271302][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1448.281390][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1448.291462][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1448.301493][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1448.311507][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1448.321539][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1448.753574][T25445] random: crng reseeded on system resumption [ 1449.236001][T25443] 9pnet: Could not find request transport: fd0x0000000000000007 [ 1449.727825][T25454] random: crng reseeded on system resumption [ 1450.409725][T25458] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5268'. [ 1450.723859][ T5981] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1451.030953][T25471] fuse: Unknown parameter './file0' [ 1451.087189][ T5981] usb 1-1: device descriptor read/64, error -71 [ 1451.427306][ T5981] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1451.957256][ T5981] usb 1-1: device descriptor read/64, error -71 [ 1452.167298][ T5981] usb usb1-port1: attempt power cycle [ 1452.587236][ T5981] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1452.789349][T25487] random: crng reseeded on system resumption [ 1453.368357][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1453.611451][ T5981] usb 1-1: device descriptor read/8, error -71 [ 1453.785669][T25492] IPVS: length: 24 != 792 [ 1454.134018][T25502] IPVS: length: 24 != 792 [ 1456.780151][T25530] random: crng reseeded on system resumption [ 1458.497170][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.507318][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.517429][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.527519][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1458.801278][T25550] random: crng reseeded on system resumption [ 1459.864666][T25556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5292'. [ 1460.632187][T25574] input: syz1 as /devices/virtual/input/input46 [ 1461.233805][T25579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5298'. [ 1462.393318][T25595] random: crng reseeded on system resumption [ 1465.527796][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1468.031887][T25658] IPv6: syztnl1: Disabled Multicast RS [ 1468.041015][T25658] random: crng reseeded on system resumption [ 1468.730017][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1468.740121][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1468.750194][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1468.760296][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1468.770360][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1468.780397][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1469.018810][T25674] random: crng reseeded on system resumption [ 1470.647931][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1471.297749][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1472.519433][T25719] random: crng reseeded on system resumption [ 1473.567232][ T5981] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1473.858444][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1473.869865][ T5981] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1473.880784][ T5981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1473.890111][ T5981] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1473.919836][ T5981] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1473.929162][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1473.940523][ T5981] usb 6-1: Product: syz [ 1473.946928][ T5981] usb 6-1: Manufacturer: syz [ 1473.989278][ T5981] cdc_wdm 6-1:1.0: skipping garbage [ 1474.035100][ T5981] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1474.196695][ T5917] usb 6-1: USB disconnect, device number 28 [ 1474.952505][T25744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5337'. [ 1476.123595][T25751] random: crng reseeded on system resumption [ 1476.646765][T25753] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1476.989587][T25761] random: crng reseeded on system resumption [ 1478.582441][T25780] random: crng reseeded on system resumption [ 1478.970345][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1481.142069][T25796] random: crng reseeded on system resumption [ 1481.527709][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1481.836904][T25800] blktrace: Concurrent blktraces are not allowed on sg0 [ 1484.097180][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1484.107381][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1484.117508][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1484.127544][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1484.137628][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1484.147725][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1486.244048][T25857] blktrace: Concurrent blktraces are not allowed on sg0 [ 1487.388337][ T30] audit: type=1400 audit(1756679693.775:1835): avc: denied { getopt } for pid=25870 comm="syz.0.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1487.927596][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1488.078311][T25884] tipc: Started in network mode [ 1488.177643][T25884] tipc: Node identity 6a6a44274f7d, cluster identity 4711 [ 1488.184845][T25884] tipc: Enabled bearer , priority 0 [ 1488.315074][T25884] tipc: Resetting bearer [ 1488.329446][T25883] tipc: Disabling bearer [ 1488.346999][T25889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5372'. [ 1489.209419][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1489.219616][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1489.229715][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1489.239802][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1492.873869][ T5917] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1493.040708][ T5917] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1493.094154][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1493.147910][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1493.213187][ T5917] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1493.233660][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1493.254046][ T5917] usb 1-1: Product: syz [ 1493.266147][ T5917] usb 1-1: Manufacturer: syz [ 1493.303245][ T5917] cdc_wdm 1-1:1.0: skipping garbage [ 1493.314800][ T5917] cdc_wdm 1-1:1.0: skipping garbage [ 1493.326088][ T5917] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1493.524632][ T5917] usb 1-1: USB disconnect, device number 68 [ 1494.333428][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1494.343665][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1494.353705][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1494.363726][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1494.373830][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1494.383857][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1494.394146][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1494.404170][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1496.517783][T25972] fuse: Unknown parameter 'grou00000000000000000000' [ 1496.632354][T25974] tipc: Enabling of bearer rejected, failed to enable media [ 1496.897136][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1499.449241][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1499.459414][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1499.469545][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1499.479695][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1499.817192][ T5917] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1500.239318][ T5917] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1500.258507][ T5917] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1500.282111][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1500.330076][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1500.362282][ T5917] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1500.391597][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1500.431453][ T5917] usb 4-1: Product: syz [ 1500.435733][ T5917] usb 4-1: Manufacturer: syz [ 1500.461948][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 1500.470257][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 1500.479614][ T5917] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1500.922252][ T5917] usb 4-1: USB disconnect, device number 64 [ 1504.122812][T26059] fuse: Unknown parameter 'group_i00000000000000000000' [ 1504.569687][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1504.579822][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1504.589905][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1504.600040][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1504.610086][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1506.494525][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1509.047844][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1509.688994][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1509.699147][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1509.709279][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1512.637465][T26150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1514.724981][T26169] siw: device registration error -23 [ 1514.822833][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1514.832945][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1514.843011][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1515.908734][ T12] bridge_slave_1: left allmulticast mode [ 1515.914438][ T12] bridge_slave_1: left promiscuous mode [ 1515.938429][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.176539][ T12] bridge_slave_0: left allmulticast mode [ 1516.182255][ T12] bridge_slave_0: left promiscuous mode [ 1516.197466][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.401151][T26197] fuse: Bad value for 'fd' [ 1517.618777][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.668420][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.683121][ T12] bond0 (unregistering): Released all slaves [ 1517.756745][T26199] tipc: Enabling of bearer rejected, failed to enable media [ 1517.882132][ T12] tipc: Left network mode [ 1518.009722][T26180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1518.057440][T26180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1518.068009][T26180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1518.130812][T26180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1518.152156][T26180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1519.695937][ T12] hsr_slave_0: left promiscuous mode [ 1519.701688][ T12] hsr_slave_1: left promiscuous mode [ 1519.741322][ T12] veth1_macvtap: left promiscuous mode [ 1519.766451][ T12] veth0_macvtap: left promiscuous mode [ 1519.787892][ T12] veth1_vlan: left promiscuous mode [ 1519.815666][ T12] veth0_vlan: left promiscuous mode [ 1520.145848][T17535] Bluetooth: hci3: command 0x0c1a tx timeout [ 1520.152006][T17535] Bluetooth: hci4: command 0x0c1a tx timeout [ 1520.158087][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 1520.167645][ T5861] Bluetooth: hci2: command 0x0419 tx timeout [ 1520.167673][T23391] Bluetooth: hci0: command 0x0419 tx timeout [ 1522.627791][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1522.730398][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1524.647815][T26259] fuse: Bad value for 'group_id' [ 1524.652791][T26259] fuse: Bad value for 'group_id' [ 1524.762282][T26267] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5464' sets config #1 [ 1525.974527][ T12] IPVS: stop unused estimator thread 0... [ 1527.592119][T26300] tipc: Enabled bearer , priority 0 [ 1527.861768][T26306] syzkaller0: entered promiscuous mode [ 1527.867384][T26306] syzkaller0: entered allmulticast mode [ 1527.886692][T26299] tipc: Resetting bearer [ 1527.972828][T26299] tipc: Disabling bearer [ 1528.513995][T26316] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5477' sets config #1 [ 1530.334718][T26332] netlink: 'syz.1.5482': attribute type 72 has an invalid length. [ 1530.405352][T26332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5482'. [ 1545.846399][ T30] audit: type=1804 audit(1756679752.295:1836): pid=26505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.5528" name="/newroot/223/file0" dev="tmpfs" ino=1168 res=1 errno=0 [ 1545.887420][T26511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5527'. [ 1546.360968][T26517] lo speed is unknown, defaulting to 1000 [ 1546.648830][T26526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5529'. [ 1546.701941][T26526] usb usb8: usbfs: process 26526 (syz.4.5529) did not claim interface 0 before use [ 1549.617356][T26563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5541'. [ 1556.388952][T26623] tipc: Enabled bearer , priority 0 [ 1556.409572][T26623] tipc: Resetting bearer [ 1556.535813][T26622] tipc: Disabling bearer [ 1560.441018][T26661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1560.467299][T26661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1560.600178][T26661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1560.798625][T26661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1560.812910][T26661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1562.620756][T23391] Bluetooth: hci4: command 0x0c1a tx timeout [ 1562.620771][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 1562.711773][ T30] audit: type=1804 audit(1756679769.195:1837): pid=26687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.5571" name="/newroot/178/file0" dev="tmpfs" ino=939 res=1 errno=0 [ 1562.807255][T23391] Bluetooth: hci0: command 0x0419 tx timeout [ 1562.819850][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 1562.925272][ T5861] Bluetooth: hci2: command 0x0419 tx timeout [ 1565.582268][T26722] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1565.667372][T26722] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1565.673393][T26722] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1565.680357][T26722] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1565.686432][T26722] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1566.047193][T26735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5581'. [ 1567.207200][T23391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1567.707754][T23391] Bluetooth: hci2: command 0x0419 tx timeout [ 1567.713793][T23391] Bluetooth: hci0: command 0x0419 tx timeout [ 1567.720717][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 1567.726749][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 1568.358987][T26768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5586'. [ 1569.774800][T26778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5592'. [ 1570.705269][T26794] blktrace: Concurrent blktraces are not allowed on sg0 [ 1571.659669][T26806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1571.666250][T26806] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1571.673087][T26806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1571.679619][T26806] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1571.686181][T26806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1572.001850][T26819] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5600'. [ 1573.824315][ T5861] Bluetooth: hci2: command 0x0419 tx timeout [ 1573.824334][T23391] Bluetooth: hci0: command 0x0419 tx timeout [ 1573.824372][T23391] Bluetooth: hci3: command 0x0c1a tx timeout [ 1573.830405][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 1573.837170][T23497] Bluetooth: hci1: command 0x0c1a tx timeout [ 1574.357470][T26839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5606'. [ 1574.579588][T26851] blktrace: Concurrent blktraces are not allowed on sg0 [ 1574.797563][ T30] audit: type=1400 audit(1756679781.275:1838): avc: denied { getopt } for pid=26837 comm="syz.4.5605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1578.178770][T26895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5617'. [ 1578.257156][T26889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1578.264571][T26889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1578.293328][T26889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1578.307516][T26889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1578.315970][T26889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1580.147192][T23391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1580.397207][T23391] Bluetooth: hci2: command 0x0419 tx timeout [ 1580.403209][T23497] Bluetooth: hci0: command 0x0419 tx timeout [ 1580.409367][T17535] Bluetooth: hci3: command 0x0c1a tx timeout [ 1580.409388][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 1581.354537][T26934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5625'. [ 1581.610188][ T30] audit: type=1326 audit(1756679788.095:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1581.677789][ T30] audit: type=1326 audit(1756679788.095:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1581.728549][ T30] audit: type=1326 audit(1756679788.095:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1581.754083][ T30] audit: type=1326 audit(1756679788.095:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1582.030207][T26943] fuse: Bad value for 'fd' [ 1582.152488][ T30] audit: type=1326 audit(1756679788.095:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1582.201728][T26947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1582.216264][ T30] audit: type=1326 audit(1756679788.095:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1582.241601][ T30] audit: type=1326 audit(1756679788.095:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1582.276817][ T30] audit: type=1326 audit(1756679788.095:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1585.732703][T26984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5635'. [ 1587.660587][T26996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5640'. [ 1587.767876][T27002] lo speed is unknown, defaulting to 1000 [ 1588.080261][T27002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5638'. [ 1589.129532][T27024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5645'. [ 1589.449621][ T30] audit: type=1804 audit(1756679795.925:1847): pid=27021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.5644" name="/newroot/280/file0" dev="tmpfs" ino=1453 res=1 errno=0 [ 1594.773273][T27072] fuse: Unknown parameter 'use00000000000000000000' [ 1596.287408][T27088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5660'. [ 1596.837566][T27091] lo speed is unknown, defaulting to 1000 [ 1597.674017][T27114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5661'. [ 1599.589243][T27124] syzkaller0: entered promiscuous mode [ 1599.594720][T27124] syzkaller0: entered allmulticast mode [ 1600.950549][T27136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5668'. [ 1602.496220][T27153] fuse: Bad value for 'user_id' [ 1602.512739][T27153] fuse: Bad value for 'user_id' [ 1606.561700][T27207] fuse: Bad value for 'user_id' [ 1606.566604][T27207] fuse: Bad value for 'user_id' [ 1608.611016][ T30] audit: type=1400 audit(1756679815.095:1848): avc: denied { ioctl } for pid=27228 comm="syz.0.5694" path="socket:[119447]" dev="sockfs" ino=119447 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1609.668000][T27246] input: syz1 as /devices/virtual/input/input48 [ 1611.404517][T27258] fuse: Unknown parameter 'user_id00000000000000000000' [ 1615.772829][T27319] fuse: Unknown parameter 'user_id00000000000000000000' [ 1617.080938][T27328] input: syz1 as /devices/virtual/input/input49 [ 1621.523338][T27378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1621.556848][T27378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1621.778360][T27378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1621.824047][T27378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1621.838856][T27378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1622.662925][T27399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5729'. [ 1623.370220][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 1623.612745][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 1623.670071][T27410] blktrace: Concurrent blktraces are not allowed on sg0 [ 1623.917289][ T5861] Bluetooth: hci2: command 0x0419 tx timeout [ 1623.919850][T27416] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1624.109516][T23391] Bluetooth: hci0: command 0x0419 tx timeout [ 1624.115564][T23391] Bluetooth: hci3: command 0x0c1a tx timeout [ 1626.071331][T27438] fuse: Bad value for 'fd' [ 1628.360000][T27469] binder: 27468:27469 ioctl 4018620d 0 returned -22 [ 1630.426684][T27495] blktrace: Concurrent blktraces are not allowed on sg0 [ 1630.837113][ T5958] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1631.015608][ T5958] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1631.024171][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.073011][ T5958] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1631.086054][ T5958] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1631.094129][ T5958] usb 4-1: Manufacturer: syz [ 1631.269963][ T5917] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1631.470166][ T5958] usb 4-1: config 0 descriptor?? [ 1631.478177][ T5958] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1631.707171][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 1631.732889][ T5917] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 1631.776996][ T5917] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1631.862172][ T5917] usb 2-1: config 1 has no interface number 0 [ 1631.887331][ T5917] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1631.907715][ T5917] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 40770, setting to 1024 [ 1631.920195][ T5917] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1631.972038][ T5917] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1632.070539][ T5917] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1632.254327][ T5958] usb 4-1: USB disconnect, device number 65 [ 1632.277609][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.305442][ T5917] usb 2-1: Product: syz [ 1632.344857][ T5917] usb 2-1: Manufacturer: syz [ 1632.628065][ T5917] usb 2-1: SerialNumber: syz [ 1632.670768][T27501] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1632.812026][T27501] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1635.655870][ T5917] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 1635.733427][ T5917] usb 2-1: USB disconnect, device number 51 [ 1636.253542][T27546] geneve2: entered promiscuous mode [ 1636.281392][T27546] geneve2: entered allmulticast mode [ 1637.526000][T27557] geneve2: entered promiscuous mode [ 1637.579982][T27547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1637.589142][T27547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1637.596388][T27547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1637.603568][T27547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1637.610935][T27547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1637.818096][T27570] blktrace: Concurrent blktraces are not allowed on sg0 [ 1637.833520][T27557] geneve2: entered allmulticast mode [ 1639.217750][T23497] Bluetooth: hci1: command 0x0c1a tx timeout [ 1639.687589][T23497] Bluetooth: hci2: command 0x0419 tx timeout [ 1639.695030][ T5861] Bluetooth: hci0: command 0x0419 tx timeout [ 1639.695085][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 1639.695105][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 1643.426285][ T30] audit: type=1326 audit(1756679849.905:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.4.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1643.966154][ T30] audit: type=1326 audit(1756679849.905:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.4.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1643.995875][ T30] audit: type=1326 audit(1756679850.435:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.4.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1649.853986][T27696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5801'. [ 1650.464090][T27705] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5803'. [ 1651.089147][ T30] audit: type=1326 audit(1756679857.575:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1651.260299][ T30] audit: type=1326 audit(1756679857.575:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1651.314902][ T1621] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1651.487223][ T30] audit: type=1326 audit(1756679857.575:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1651.665557][ T30] audit: type=1326 audit(1756679857.575:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1651.705077][ T30] audit: type=1326 audit(1756679857.575:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1651.740005][ T1621] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1651.751571][ T1621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.789879][ T1621] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1651.868388][ T30] audit: type=1326 audit(1756679857.575:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1652.127119][ T1621] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1652.217172][ T1621] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1652.599573][ T1621] usb 4-1: Manufacturer: syz [ 1652.626436][ T30] audit: type=1326 audit(1756679857.575:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1652.661393][ T1621] usb 4-1: config 0 descriptor?? [ 1652.935291][ T1621] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1652.957389][ T30] audit: type=1326 audit(1756679857.575:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1653.363095][ T30] audit: type=1326 audit(1756679857.585:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27720 comm="syz.1.5807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1654.277213][ T5958] usb 4-1: USB disconnect, device number 66 [ 1656.586330][T27800] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5821'. [ 1659.859756][T27837] fuse: Unknown parameter 'use00000000000000000000' [ 1660.087313][ T5917] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1660.316871][ T5917] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1660.339102][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1660.378335][ T5917] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1660.393915][ T5917] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1660.416708][ T5917] usb 4-1: Manufacturer: syz [ 1660.448194][ T5917] usb 4-1: config 0 descriptor?? [ 1660.478368][ T5917] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1660.986222][ T5981] usb 4-1: USB disconnect, device number 67 [ 1662.044811][T27865] binder: BINDER_SET_CONTEXT_MGR already set [ 1662.052605][T27865] binder: 27864:27865 ioctl 4018620d 2000000000c0 returned -16 [ 1662.490706][T27876] input: syz1 as /devices/virtual/input/input50 [ 1663.136671][T27886] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5840'. [ 1665.822024][ T5917] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1666.132293][ T5917] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1666.215320][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1666.279643][ T5917] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1666.299079][ T5917] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1666.317927][ T5917] usb 4-1: Manufacturer: syz [ 1666.333867][ T5917] usb 4-1: config 0 descriptor?? [ 1666.422127][ T5917] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1667.779604][T17745] usb 4-1: USB disconnect, device number 68 [ 1669.641624][T27944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5852'. [ 1674.401407][T27996] binder: BINDER_SET_CONTEXT_MGR already set [ 1674.407609][T27996] binder: 27992:27996 ioctl 4018620d 2000000000c0 returned -16 [ 1675.105640][T28009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5865'. [ 1677.110520][T28038] input: syz1 as /devices/virtual/input/input51 [ 1681.175349][T28083] usb usb8: usbfs: process 28083 (syz.3.5876) did not claim interface 0 before use [ 1684.173160][T28068] lo speed is unknown, defaulting to 1000 [ 1687.912558][T28156] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.5894' sets config #1 [ 1697.885226][T28265] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5916'. [ 1701.560787][T28303] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5923'. [ 1702.327672][T28313] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5926'. [ 1703.486103][T28328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1703.953914][T28334] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1704.976644][T28340] fuse: Unknown parameter '0x0000000000000003' [ 1705.530350][T28358] usb usb8: usbfs: process 28358 (syz.3.5933) did not claim interface 0 before use [ 1708.535032][T28383] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5940'. [ 1709.355773][T28341] lo speed is unknown, defaulting to 1000 [ 1710.846759][T28402] fuse: Unknown parameter '0x0000000000000003' [ 1714.489678][T28456] binder: BINDER_SET_CONTEXT_MGR already set [ 1714.657102][T28456] binder: 28454:28456 ioctl 4018620d 2000000000c0 returned -16 [ 1715.805031][T28475] lo speed is unknown, defaulting to 1000 [ 1718.947383][ T5958] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1719.237093][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 1719.327095][ T5958] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 1719.336754][ T5958] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1719.369958][ T5958] usb 2-1: config 1 has no interface number 0 [ 1719.391082][ T5958] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1719.449508][ T5958] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 40770, setting to 1024 [ 1719.482815][ T5958] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1719.613172][ T5958] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1719.839110][ T5958] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1719.879315][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.917075][ T5958] usb 2-1: Product: syz [ 1719.931690][ T5958] usb 2-1: Manufacturer: syz [ 1719.936290][ T5958] usb 2-1: SerialNumber: syz [ 1720.007436][T28516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1720.071208][T28516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1720.697513][ T5958] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 1720.845195][ T5958] usb 2-1: USB disconnect, device number 52 [ 1721.924648][T28554] netlink: 'syz.5.5972': attribute type 29 has an invalid length. [ 1721.937282][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5972'. [ 1726.991128][T28619] netlink: 'syz.4.5988': attribute type 3 has an invalid length. [ 1727.017927][T28619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5988'. [ 1728.307068][ T30] audit: type=1326 audit(1756679934.775:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1728.402432][ T30] audit: type=1326 audit(1756679934.775:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1728.446921][ T30] audit: type=1326 audit(1756679934.775:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1728.487667][T28640] syzkaller0: entered promiscuous mode [ 1728.493172][T28640] syzkaller0: entered allmulticast mode [ 1728.581366][ T30] audit: type=1326 audit(1756679934.775:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1728.648742][ T30] audit: type=1326 audit(1756679934.775:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1728.700899][ T30] audit: type=1326 audit(1756679934.775:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1728.815541][ T30] audit: type=1326 audit(1756679934.775:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1728.842141][ T30] audit: type=1326 audit(1756679934.775:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1728.867536][ T30] audit: type=1326 audit(1756679934.775:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1729.339618][ T30] audit: type=1326 audit(1756679934.775:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28630 comm="syz.3.5992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61038ebe9 code=0x7ffc0000 [ 1730.319026][T28657] netlink: 'syz.0.6000': attribute type 3 has an invalid length. [ 1730.327428][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6000'. [ 1732.569697][T28680] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6006' sets config #1 [ 1732.730329][T28681] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.6007' sets config #1 [ 1734.444452][T28696] geneve2: entered promiscuous mode [ 1734.450050][T28696] geneve2: entered allmulticast mode [ 1734.812463][T28702] netlink: 'syz.5.6012': attribute type 3 has an invalid length. [ 1734.821888][T28702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1735.787245][T28718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6013'. [ 1735.801249][T28718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6013'. [ 1736.140627][T28716] random: crng reseeded on system resumption [ 1738.063733][T28744] lo speed is unknown, defaulting to 1000 [ 1738.267234][T28751] syzkaller0: entered promiscuous mode [ 1738.274798][T28751] syzkaller0: entered allmulticast mode [ 1738.403289][T28761] usb usb8: usbfs: process 28761 (syz.3.6019) did not claim interface 0 before use [ 1741.426750][T28802] bridge_slave_0: left allmulticast mode [ 1741.441420][T28802] bridge_slave_0: left promiscuous mode [ 1741.453675][T28802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.475517][T28802] bridge_slave_1: left allmulticast mode [ 1741.481573][T28802] bridge_slave_1: left promiscuous mode [ 1741.488508][T28802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.503756][T28802] bond0: (slave bond_slave_0): Releasing backup interface [ 1741.515113][T28802] bond0: (slave bond_slave_1): Releasing backup interface [ 1741.535230][T28802] team0: Port device team_slave_0 removed [ 1741.545843][T28802] team0: Port device team_slave_1 removed [ 1741.552408][T28802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.559876][T28802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.570184][T28802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1741.578741][T28802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1741.871793][T27832] IPVS: starting estimator thread 0... [ 1741.878845][T28817] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1741.885838][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1742.078305][T28820] lo speed is unknown, defaulting to 1000 [ 1742.396554][T28821] netlink: 'syz.5.6038': attribute type 4 has an invalid length. [ 1742.404390][T28821] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1742.641673][T28821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1743.237255][T28819] IPVS: using max 40 ests per chain, 96000 per kthread [ 1743.795107][T28837] netlink: 'syz.4.6046': attribute type 13 has an invalid length. [ 1743.837752][T28837] gretap0: refused to change device tx_queue_len [ 1743.838141][T28837] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1743.941654][T28834] lo speed is unknown, defaulting to 1000 [ 1744.024794][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1744.024809][ T30] audit: type=1326 audit(1756679950.505:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.024853][ T30] audit: type=1326 audit(1756679950.505:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.026024][ T30] audit: type=1326 audit(1756679950.505:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.027597][ T30] audit: type=1326 audit(1756679950.505:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.027642][ T30] audit: type=1326 audit(1756679950.505:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.029841][ T30] audit: type=1326 audit(1756679950.515:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.030049][ T30] audit: type=1326 audit(1756679950.515:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.031347][ T30] audit: type=1326 audit(1756679950.515:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.031535][ T30] audit: type=1326 audit(1756679950.515:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.031687][ T30] audit: type=1326 audit(1756679950.515:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28842 comm="syz.4.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93878ebe9 code=0x7ffc0000 [ 1744.125863][T28843] SELinux: policydb magic number 0x656b6177 does not match expected magic number 0xf97cff8c [ 1744.125910][T28843] SELinux: failed to load policy [ 1744.169194][T28834] usb usb8: usbfs: process 28834 (syz.5.6045) did not claim interface 0 before use [ 1744.171253][T28843] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6047'. [ 1744.612502][T28849] lo speed is unknown, defaulting to 1000 [ 1744.664056][T28850] netlink: 'syz.0.6048': attribute type 4 has an invalid length. [ 1744.671996][T28850] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6048'. [ 1744.695755][T28850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6048'. [ 1746.333464][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6055'. [ 1746.507917][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6055'. [ 1746.696718][T28875] netlink: 'syz.0.6054': attribute type 4 has an invalid length. [ 1746.704606][T28875] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6054'. [ 1746.786842][T28876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6054'. [ 1748.629657][T28874] lo speed is unknown, defaulting to 1000 [ 1748.696368][T28878] netlink: 'syz.3.6056': attribute type 13 has an invalid length. [ 1748.813649][T28878] gretap0: refused to change device tx_queue_len [ 1748.926712][T28878] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1748.974486][T28887] bridge_slave_0: left allmulticast mode [ 1749.006946][T28887] bridge_slave_0: left promiscuous mode [ 1749.024301][T28887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.053605][T28891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6057'. [ 1749.068405][T28887] bridge_slave_1: left allmulticast mode [ 1749.074075][T28887] bridge_slave_1: left promiscuous mode [ 1749.132928][T28887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.190542][T28887] bond0: (slave bond_slave_0): Releasing backup interface [ 1749.310122][T28887] bond0: (slave bond_slave_1): Releasing backup interface [ 1749.354708][T28887] team0: Port device team_slave_0 removed [ 1749.383311][T28887] team0: Port device team_slave_1 removed [ 1749.390989][T28887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.399763][T28887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.409777][T28887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.437687][T28887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.572699][T28896] tipc: Enabled bearer , priority 0 [ 1750.166103][T28888] tipc: Disabling bearer [ 1750.760591][T28937] netlink: 'syz.3.6069': attribute type 3 has an invalid length. [ 1750.823962][T28937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6069'. [ 1751.579376][T28956] netlink: 'syz.3.6073': attribute type 3 has an invalid length. [ 1752.541086][T28977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1752.550001][T28977] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1752.585629][T28977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1753.039722][T28977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1753.062923][T28977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1753.907196][T28994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1754.507243][T23391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1754.585254][T23391] Bluetooth: hci4: command 0x0c1a tx timeout [ 1754.647281][T23391] Bluetooth: hci3: command 0x0c1a tx timeout [ 1755.047089][T23391] Bluetooth: hci0: command 0x0419 tx timeout [ 1755.128662][T23391] Bluetooth: hci2: command 0x0419 tx timeout [ 1755.376148][T29024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6091'. [ 1755.416327][T29026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6089'. [ 1755.521935][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6090'. [ 1756.715445][T29042] netlink: 'syz.5.6094': attribute type 13 has an invalid length. [ 1756.914171][T29042] gretap0: refused to change device tx_queue_len [ 1756.937561][T29042] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1757.170332][T29049] lo speed is unknown, defaulting to 1000 [ 1757.249505][T29056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1757.256050][T29056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1757.302713][T29063] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 1757.309332][T29063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1757.316900][T29056] vhci_hcd vhci_hcd.0: Device attached [ 1757.350727][T29056] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1757.372269][T29063] vhci_hcd vhci_hcd.0: Device attached [ 1757.391187][T29056] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 1757.397805][T29056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1757.419850][T29056] vhci_hcd vhci_hcd.0: Device attached [ 1757.434602][T29056] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 1757.441219][T29056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1757.452162][T29056] vhci_hcd vhci_hcd.0: Device attached [ 1757.476819][T29076] usb usb8: usbfs: process 29076 (syz.3.6096) did not claim interface 0 before use [ 1757.517359][T27832] vhci_hcd: vhci_device speed not set [ 1757.587255][T27832] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 1757.701523][T29063] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1757.723750][T29056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 1757.730367][T29056] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1757.905026][T29056] vhci_hcd vhci_hcd.0: Device attached [ 1758.721064][T29074] vhci_hcd: connection closed [ 1758.730554][T29064] vhci_hcd: connection closed [ 1758.738000][T29070] vhci_hcd: connection closed [ 1758.747129][T29081] vhci_hcd: connection closed [ 1758.752869][T29061] vhci_hcd: connection reset by peer [ 1758.763800][T14336] vhci_hcd: stop threads [ 1758.783175][T14336] vhci_hcd: release socket [ 1758.817306][T14336] vhci_hcd: disconnect device [ 1758.917041][T14336] vhci_hcd: stop threads [ 1758.924548][T14336] vhci_hcd: release socket [ 1758.951810][T14336] vhci_hcd: disconnect device [ 1758.997321][T14336] vhci_hcd: stop threads [ 1759.002779][T14336] vhci_hcd: release socket [ 1759.007453][T14336] vhci_hcd: disconnect device [ 1759.070863][T14336] vhci_hcd: stop threads [ 1759.088892][T14336] vhci_hcd: release socket [ 1759.121582][T14336] vhci_hcd: disconnect device [ 1759.143573][T23539] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1759.167704][T14336] vhci_hcd: stop threads [ 1759.182142][T14336] vhci_hcd: release socket [ 1759.200598][T23539] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1759.211776][T14336] vhci_hcd: disconnect device [ 1759.705890][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1759.705905][ T30] audit: type=1400 audit(1756679966.185:1942): avc: denied { mounton } for pid=29103 comm="syz.1.6109" path="/289/file0" dev="ramfs" ino=130117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1759.707172][T29104] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1761.693154][T29132] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1761.699700][T29132] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1761.707490][T29132] vhci_hcd vhci_hcd.0: Device attached [ 1761.727694][T29132] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 1761.734317][T29132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1761.747294][T29132] vhci_hcd vhci_hcd.0: Device attached [ 1761.756930][T29132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1761.783670][T29132] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 1761.790302][T29132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1761.798894][T29132] vhci_hcd vhci_hcd.0: Device attached [ 1761.830839][T29132] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 1761.837460][T29132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1761.871754][T29132] vhci_hcd vhci_hcd.0: Device attached [ 1761.885157][T29141] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 1761.891784][T29141] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1761.911139][T29141] vhci_hcd vhci_hcd.0: Device attached [ 1761.949213][T29132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1762.069054][T29139] vhci_hcd: connection closed [ 1762.072880][T29133] vhci_hcd: connection closed [ 1762.079758][ T6061] vhci_hcd: stop threads [ 1762.089118][T29142] vhci_hcd: connection closed [ 1762.089302][T29137] vhci_hcd: connection closed [ 1762.094136][T29135] vhci_hcd: connection closed [ 1762.099384][ T6061] vhci_hcd: release socket [ 1762.109030][ T6061] vhci_hcd: disconnect device [ 1762.118833][ T6061] vhci_hcd: stop threads [ 1762.123188][ T6061] vhci_hcd: release socket [ 1762.128260][ T6061] vhci_hcd: disconnect device [ 1762.133171][ T6061] vhci_hcd: stop threads [ 1762.141182][ T6061] vhci_hcd: release socket [ 1762.145661][ T6061] vhci_hcd: disconnect device [ 1762.162657][ T6061] vhci_hcd: stop threads [ 1762.166913][ T6061] vhci_hcd: release socket [ 1762.175614][ T6061] vhci_hcd: disconnect device [ 1762.185557][ T6061] vhci_hcd: stop threads [ 1762.191563][ T6061] vhci_hcd: release socket [ 1762.196202][ T6061] vhci_hcd: disconnect device [ 1762.509832][T29123] lo speed is unknown, defaulting to 1000 [ 1762.545194][T29145] bridge_slave_0: left allmulticast mode [ 1762.554304][T29145] bridge_slave_0: left promiscuous mode [ 1762.561201][T29145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.615506][T29146] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1762.819401][T29145] bridge_slave_1: left allmulticast mode [ 1762.825081][T29145] bridge_slave_1: left promiscuous mode [ 1762.834105][T29145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.851062][T29145] bond0: (slave bond_slave_0): Releasing backup interface [ 1762.864558][T29145] bond0: (slave bond_slave_1): Releasing backup interface [ 1763.820097][T27832] vhci_hcd: vhci_device speed not set [ 1766.737311][T29157] netlink: 'syz.5.6118': attribute type 4 has an invalid length. [ 1766.746023][T29157] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6118'. [ 1766.901070][T29145] team0: Failed to send options change via netlink (err -105) [ 1766.971523][T29145] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1767.067484][T29158] netlink: 'syz.4.6119': attribute type 4 has an invalid length. [ 1767.075299][T29158] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1767.647276][T29160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6118'. [ 1768.630940][T29145] team0: Port device team_slave_0 removed [ 1768.664583][T29145] team0: Failed to send options change via netlink (err -105) [ 1768.676098][T29145] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1768.689181][T29145] team0: Port device team_slave_1 removed [ 1768.695542][T29145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1768.703020][T29145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1768.712126][T29145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1768.719827][T29145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1768.744053][T29146] team0: Failed to send options change via netlink (err -105) [ 1768.752053][T29146] team0: Mode changed to "loadbalance" [ 1768.790840][T29165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6121'. [ 1768.810504][T29155] lo speed is unknown, defaulting to 1000 [ 1768.821708][T29156] lo speed is unknown, defaulting to 1000 [ 1769.197971][ T24] usb usb36-port1: attempt power cycle [ 1769.616081][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6127'. [ 1769.632143][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6127'. [ 1769.908968][ T24] usb usb36-port1: unable to enumerate USB device [ 1769.997696][ T30] audit: type=1326 audit(1756679976.485:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.146716][ T30] audit: type=1326 audit(1756679976.485:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.277235][ T30] audit: type=1326 audit(1756679976.555:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.442568][ T30] audit: type=1326 audit(1756679976.555:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.478318][ T30] audit: type=1326 audit(1756679976.555:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.509574][ T30] audit: type=1326 audit(1756679976.555:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.555977][ T30] audit: type=1326 audit(1756679976.555:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.655941][ T30] audit: type=1326 audit(1756679976.555:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.713367][ T30] audit: type=1326 audit(1756679976.555:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1770.747113][ T30] audit: type=1326 audit(1756679976.555:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1771.586180][T29215] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6138' sets config #1 [ 1775.360451][T29259] netlink: 'syz.5.6149': attribute type 4 has an invalid length. [ 1775.368327][T29259] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6149'. [ 1775.399492][T29259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6149'. [ 1776.796051][T29266] netlink: 'syz.0.6150': attribute type 4 has an invalid length. [ 1776.803856][T29266] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1776.892617][T29267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1777.884694][T29274] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6152'. [ 1778.568571][T29274] team0: Mode changed to "loadbalance" [ 1778.784470][T29287] SELinux: policydb string S does not match my string SE Linux [ 1778.792457][T29287] SELinux: failed to load policy [ 1779.083953][T29291] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.6157' sets config #1 [ 1779.135349][T29293] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1779.390160][ T30] kauditd_printk_skb: 233 callbacks suppressed [ 1779.390177][ T30] audit: type=1326 audit(1756679985.875:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1779.478524][ T30] audit: type=1326 audit(1756679985.875:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1779.711535][ T30] audit: type=1326 audit(1756679985.905:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1779.809768][ T30] audit: type=1326 audit(1756679985.905:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1780.157302][ T30] audit: type=1326 audit(1756679985.905:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1780.183187][ T30] audit: type=1326 audit(1756679985.905:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1780.265645][ T30] audit: type=1326 audit(1756679985.915:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1780.437040][ T30] audit: type=1326 audit(1756679985.915:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1780.613694][ T30] audit: type=1326 audit(1756679985.925:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1780.638366][ T30] audit: type=1326 audit(1756679985.925:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29298 comm="syz.1.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef39b8ebe9 code=0x7ffc0000 [ 1780.774631][T29312] syzkaller1: entered promiscuous mode [ 1780.807089][T29312] syzkaller1: entered allmulticast mode [ 1781.600255][T29329] lo speed is unknown, defaulting to 1000 [ 1781.897351][T29344] usb usb8: usbfs: process 29344 (syz.3.6170) did not claim interface 0 before use [ 1782.294125][T29339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1782.314404][T29339] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1782.342739][T29339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1782.373893][T29339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1782.394095][T29339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1783.328510][T29357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6178'. [ 1784.487152][T23391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1784.493191][T23391] Bluetooth: hci4: command 0x0c1a tx timeout [ 1784.500414][T23391] Bluetooth: hci2: command 0x0419 tx timeout [ 1784.506411][T23391] Bluetooth: hci0: command 0x0419 tx timeout [ 1784.512847][T23391] Bluetooth: hci3: command 0x0c1a tx timeout [ 1784.835639][T29370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1784.880276][T29369] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 1784.886890][T29369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1784.937046][T29366] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1784.943604][T29366] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1784.958056][T29369] vhci_hcd vhci_hcd.0: Device attached [ 1784.977307][T29370] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 1784.983931][T29370] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1785.040243][T29366] vhci_hcd vhci_hcd.0: Device attached [ 1785.047165][T29381] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6184'. [ 1785.049882][T29370] vhci_hcd vhci_hcd.0: Device attached [ 1785.057755][T29381] team0: Unable to change to the same mode the team is in [ 1785.140803][T29369] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 1785.147429][T29369] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1785.271068][T29369] vhci_hcd vhci_hcd.0: Device attached [ 1785.794620][T17745] vhci_hcd: vhci_device speed not set [ 1785.890625][T17745] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 1786.716036][T29366] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1786.722579][T29366] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1786.744980][T29369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1786.855665][T29366] vhci_hcd vhci_hcd.0: Device attached [ 1787.085654][T29391] vhci_hcd: connection closed [ 1787.086019][ T6061] vhci_hcd: stop threads [ 1787.100172][ T6061] vhci_hcd: release socket [ 1787.104031][T29368] vhci_hcd: connection reset by peer [ 1787.104934][ T6061] vhci_hcd: disconnect device [ 1787.613762][T29375] vhci_hcd: connection closed [ 1787.614008][T29383] vhci_hcd: connection closed [ 1787.618847][T29371] vhci_hcd: connection closed [ 1787.644228][ T6061] vhci_hcd: stop threads [ 1787.789290][ T6061] vhci_hcd: release socket [ 1787.793860][ T6061] vhci_hcd: disconnect device [ 1787.801451][ T6061] vhci_hcd: stop threads [ 1787.805791][ T6061] vhci_hcd: release socket [ 1787.817116][ T6061] vhci_hcd: disconnect device [ 1787.841834][ T6061] vhci_hcd: stop threads [ 1787.846101][ T6061] vhci_hcd: release socket [ 1787.869612][ T6061] vhci_hcd: disconnect device [ 1787.875788][ T6061] vhci_hcd: stop threads [ 1787.881669][ T6061] vhci_hcd: release socket [ 1787.886271][ T6061] vhci_hcd: disconnect device [ 1789.466932][T29417] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1789.473549][T29417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1789.499318][T29417] vhci_hcd vhci_hcd.0: Device attached [ 1789.523554][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1789.523568][ T30] audit: type=1326 audit(1756679996.005:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1789.559837][T29417] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 1789.566348][T29417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1789.614033][T29408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1789.621609][T29408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1789.628700][T29417] vhci_hcd vhci_hcd.0: Device attached [ 1789.634414][ T30] audit: type=1326 audit(1756679996.045:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1789.658348][ T30] audit: type=1326 audit(1756679996.045:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1789.682610][ T30] audit: type=1326 audit(1756679996.045:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1789.706773][ T5958] vhci_hcd: vhci_device speed not set [ 1789.837169][ T5958] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 1789.939384][T29427] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1790.032051][ T30] audit: type=1326 audit(1756679996.045:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1790.037548][T29417] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 1790.062100][T29417] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1790.076957][T29433] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 1790.083575][T29433] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1790.094981][T29436] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 1790.097032][T29408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1790.101588][T29436] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1790.115545][T29408] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1790.124487][T29417] vhci_hcd vhci_hcd.0: Device attached [ 1790.132952][T29408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1790.139291][T29433] vhci_hcd vhci_hcd.0: Device attached [ 1790.146465][T29436] vhci_hcd vhci_hcd.0: Device attached [ 1790.147763][ T30] audit: type=1326 audit(1756679996.045:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1790.175682][ T30] audit: type=1326 audit(1756679996.045:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1790.199418][ T30] audit: type=1326 audit(1756679996.045:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1790.223625][ T30] audit: type=1326 audit(1756679996.045:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1790.329155][T29417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1790.347070][ T30] audit: type=1326 audit(1756679996.045:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29420 comm="syz.5.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c1d8ebe9 code=0x7ffc0000 [ 1790.451809][T29437] vhci_hcd: connection closed [ 1790.452003][T29430] vhci_hcd: connection closed [ 1790.456772][ T12] vhci_hcd: stop threads [ 1790.456888][T29422] vhci_hcd: connection closed [ 1790.461624][T29434] vhci_hcd: connection closed [ 1790.472037][T29418] vhci_hcd: connection reset by peer [ 1790.483436][ T12] vhci_hcd: release socket [ 1790.497270][ T12] vhci_hcd: disconnect device [ 1790.563014][ T12] vhci_hcd: stop threads [ 1790.572102][ T12] vhci_hcd: release socket [ 1790.583293][ T12] vhci_hcd: disconnect device [ 1790.634011][ T12] vhci_hcd: stop threads [ 1790.782188][ T12] vhci_hcd: release socket [ 1790.787860][ T12] vhci_hcd: disconnect device [ 1790.822916][ T12] vhci_hcd: stop threads [ 1790.857573][ T12] vhci_hcd: release socket [ 1790.862646][T29454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1790.869133][T29454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1790.881809][ T12] vhci_hcd: disconnect device [ 1790.892599][ T12] vhci_hcd: stop threads [ 1790.896928][ T12] vhci_hcd: release socket [ 1790.903305][ T12] vhci_hcd: disconnect device [ 1790.909114][T29454] vhci_hcd vhci_hcd.0: Device attached [ 1790.917078][T29458] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 1790.923592][T29458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1791.026139][T29454] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 1791.032747][T29454] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1791.037334][T29459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1791.308322][ T24] vhci_hcd: vhci_device speed not set [ 1791.377123][T17745] vhci_hcd: vhci_device speed not set [ 1791.733603][T23391] Bluetooth: hci4: command 0x0c1a tx timeout [ 1791.738188][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 1791.754302][T29458] vhci_hcd vhci_hcd.0: Device attached [ 1791.773187][ T24] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 1791.783550][T29454] vhci_hcd vhci_hcd.0: Device attached [ 1791.840904][T29464] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 1791.847527][T29464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1791.896219][T29454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 1791.902846][T29454] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1791.951309][T29464] vhci_hcd vhci_hcd.0: Device attached [ 1791.969070][T29471] lo speed is unknown, defaulting to 1000 [ 1792.017322][T29454] vhci_hcd vhci_hcd.0: Device attached [ 1792.056403][T29458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1792.136839][T29473] vhci_hcd: connection closed [ 1792.137179][T29467] vhci_hcd: connection closed [ 1792.137611][T29455] vhci_hcd: connection reset by peer [ 1792.142110][T29462] vhci_hcd: connection closed [ 1792.152248][T29460] vhci_hcd: connection closed [ 1792.157665][T14332] vhci_hcd: stop threads [ 1792.174449][ T5861] Bluetooth: hci2: command 0x0419 tx timeout [ 1792.174470][T23391] Bluetooth: hci0: command 0x0419 tx timeout [ 1792.181454][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 1792.248736][T14332] vhci_hcd: release socket [ 1792.253627][T14332] vhci_hcd: disconnect device [ 1792.267516][T14332] vhci_hcd: stop threads [ 1792.271942][T14332] vhci_hcd: release socket [ 1792.276702][T14332] vhci_hcd: disconnect device [ 1792.288542][T14332] vhci_hcd: stop threads [ 1792.292898][T14332] vhci_hcd: release socket [ 1792.298012][T14332] vhci_hcd: disconnect device [ 1792.302803][T14332] vhci_hcd: stop threads [ 1792.307288][T14332] vhci_hcd: release socket [ 1792.311868][T14332] vhci_hcd: disconnect device [ 1792.317092][T14332] vhci_hcd: stop threads [ 1792.323204][T14332] vhci_hcd: release socket [ 1792.328733][T14332] vhci_hcd: disconnect device [ 1792.402077][T29482] usb usb8: usbfs: process 29482 (syz.3.6201) did not claim interface 0 before use [ 1792.480192][T29483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6203'. [ 1792.532028][T29487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6203'. [ 1794.534892][T29509] lo speed is unknown, defaulting to 1000 [ 1794.724811][T29517] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6209'. [ 1795.117136][ T5958] vhci_hcd: vhci_device speed not set [ 1796.151177][T29531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6214'. [ 1797.111679][ T24] vhci_hcd: vhci_device speed not set [ 1797.134633][T23539] usb usb42-port1: attempt power cycle [ 1798.068159][T23539] usb usb42-port1: unable to enumerate USB device [ 1798.515444][T29543] lo speed is unknown, defaulting to 1000 [ 1798.698073][ T5917] usb usb34-port1: attempt power cycle [ 1799.163899][T29549] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1799.187182][T29549] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1799.196915][T29549] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1799.663520][ T5917] usb usb34-port1: unable to enumerate USB device [ 1800.589887][T29564] tipc: Enabled bearer , priority 0 [ 1800.613404][T29564] tipc: Resetting bearer [ 1800.791999][T29562] tipc: Disabling bearer [ 1800.874874][T29576] SELinux: failed to load policy [ 1800.892110][T29577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'. [ 1800.927252][T27832] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1800.946418][T29583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'. [ 1801.607792][T27832] usb 6-1: Using ep0 maxpacket: 32 [ 1801.640591][T27832] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1801.651905][T27832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.663292][T27832] usb 6-1: config 0 descriptor?? [ 1802.255073][T27832] usbhid 6-1:0.0: can't add hid device: -71 [ 1802.537509][T27832] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1802.579372][T27832] usb 6-1: USB disconnect, device number 29 [ 1802.799318][T29602] tipc: Enabled bearer , priority 0 [ 1803.928458][T29602] syzkaller0: entered promiscuous mode [ 1803.933934][T29602] syzkaller0: entered allmulticast mode [ 1804.009397][T27832] tipc: Node number set to 2859455383 [ 1804.133290][T29602] tipc: Resetting bearer [ 1804.220619][T29601] tipc: Resetting bearer [ 1804.307730][T29601] tipc: Disabling bearer [ 1805.452876][T29619] lo speed is unknown, defaulting to 1000 [ 1806.460632][T29625] tipc: Enabled bearer , priority 0 [ 1806.471295][T29625] tipc: Resetting bearer [ 1806.532984][T29621] tipc: Disabling bearer [ 1808.949330][T29656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6248'. [ 1809.065821][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6248'. [ 1810.963545][T29678] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1810.970090][T29678] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1810.993422][T29678] vhci_hcd vhci_hcd.0: Device attached [ 1811.143800][T29677] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 1811.150341][T29677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1811.245132][T29686] netlink: 'syz.1.6255': attribute type 4 has an invalid length. [ 1811.252984][T29686] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6255'. [ 1811.482606][T29686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6255'. [ 1812.444360][ T6010] vhci_hcd: vhci_device speed not set [ 1812.484252][T29677] vhci_hcd vhci_hcd.0: Device attached [ 1812.608374][ T6010] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1812.644246][T29677] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1813.658816][T29677] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 1813.665425][T29677] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1814.037998][T29677] vhci_hcd vhci_hcd.0: Device attached [ 1814.164405][T29704] tipc: Enabled bearer , priority 0 [ 1814.171210][T29677] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14) [ 1814.177613][T29704] tipc: Resetting bearer [ 1814.177817][T29677] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1814.197557][T29677] vhci_hcd vhci_hcd.0: Device attached [ 1814.296160][T29709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1814.325191][T29678] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(17) [ 1814.331804][T29678] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1814.346823][T29703] tipc: Disabling bearer [ 1814.371696][ T5861] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 1814.420953][T29678] vhci_hcd vhci_hcd.0: Device attached [ 1814.579680][T29707] vhci_hcd: connection closed [ 1814.579916][ T6061] vhci_hcd: stop threads [ 1814.589413][T29705] vhci_hcd: connection closed [ 1814.589699][T29699] vhci_hcd: connection closed [ 1814.594423][T29679] vhci_hcd: connection reset by peer [ 1814.605244][T29684] vhci_hcd: connection closed [ 1814.621009][ T6061] vhci_hcd: release socket [ 1814.640620][ T6061] vhci_hcd: disconnect device [ 1814.646284][ T6061] vhci_hcd: stop threads [ 1814.687414][ T6061] vhci_hcd: release socket [ 1814.730688][ T6061] vhci_hcd: disconnect device [ 1815.097543][ T6061] vhci_hcd: stop threads [ 1815.111998][ T6061] vhci_hcd: release socket [ 1815.127737][ T6061] vhci_hcd: disconnect device [ 1815.159634][ T6061] vhci_hcd: stop threads [ 1815.164004][ T6061] vhci_hcd: release socket [ 1815.172745][ T6061] vhci_hcd: disconnect device [ 1815.182925][ T6061] vhci_hcd: stop threads [ 1815.194185][ T6061] vhci_hcd: release socket [ 1815.217113][ T6061] vhci_hcd: disconnect device [ 1816.925053][T29733] usb usb1: usbfs: process 29733 (syz.5.6267) did not claim interface 0 before use [ 1818.397864][ T6010] vhci_hcd: vhci_device speed not set [ 1818.424814][ T5861] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1818.434519][ T5861] Bluetooth: hci3: Injecting HCI hardware error event [ 1818.450586][ T5861] Bluetooth: hci3: hardware error 0x00 [ 1818.985806][T29750] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1818.992329][T29750] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1819.074967][T29750] vhci_hcd vhci_hcd.0: Device attached [ 1819.257090][T23539] vhci_hcd: vhci_device speed not set [ 1819.260693][T29765] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1819.561436][T29753] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 1819.568052][T29753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1819.673253][T23539] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 1819.698836][T29753] vhci_hcd vhci_hcd.0: Device attached [ 1819.708600][T29765] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 1819.715117][T29765] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1819.734140][T29765] vhci_hcd vhci_hcd.0: Device attached [ 1820.067215][T29750] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 1820.073814][T29750] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1820.091752][T29753] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 1820.098375][T29753] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1820.108267][T29750] vhci_hcd vhci_hcd.0: Device attached [ 1820.193477][T29780] netlink: 'syz.5.6275': attribute type 4 has an invalid length. [ 1820.201306][T29780] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6275'. [ 1820.239337][T29780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6275'. [ 1821.063751][ T5861] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1821.077652][T27832] usb usb40-port1: attempt power cycle [ 1821.431538][T29753] vhci_hcd vhci_hcd.0: Device attached [ 1821.461052][T29782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6276'. [ 1822.467262][T29778] vhci_hcd: connection closed [ 1822.468181][T29771] vhci_hcd: connection closed [ 1822.469401][T29775] vhci_hcd: connection closed [ 1822.473047][T29760] vhci_hcd: connection closed [ 1822.478249][T29754] vhci_hcd: connection reset by peer [ 1822.487372][T29782] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6276'. [ 1822.519970][ T60] vhci_hcd: stop threads [ 1822.524249][ T60] vhci_hcd: release socket [ 1822.529912][ T60] vhci_hcd: disconnect device [ 1822.535310][ T60] vhci_hcd: stop threads [ 1822.540151][ T60] vhci_hcd: release socket [ 1822.544761][ T60] vhci_hcd: disconnect device [ 1822.587385][ T60] vhci_hcd: stop threads [ 1822.592629][ T60] vhci_hcd: release socket [ 1822.621386][ T60] vhci_hcd: disconnect device [ 1822.683094][ T60] vhci_hcd: stop threads [ 1822.721323][ T60] vhci_hcd: release socket [ 1822.757117][ T60] vhci_hcd: disconnect device [ 1822.768145][ T60] vhci_hcd: stop threads [ 1822.876859][ T60] vhci_hcd: release socket [ 1822.881943][ T60] vhci_hcd: disconnect device [ 1823.353888][T27832] usb usb40-port1: unable to enumerate USB device [ 1823.486789][T29804] netlink: 'syz.5.6282': attribute type 4 has an invalid length. [ 1823.495066][T29804] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6282'. [ 1824.957787][T23539] vhci_hcd: vhci_device speed not set [ 1827.277973][T17745] usb usb34-port1: attempt power cycle [ 1828.544581][T17745] usb usb34-port1: unable to enumerate USB device [ 1829.570457][T29868] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1832.155188][T29883] lo speed is unknown, defaulting to 1000 [ 1832.759259][T29895] netlink: 452 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1833.977109][T17745] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1834.209918][T17745] usb 2-1: Using ep0 maxpacket: 32 [ 1834.211003][T29909] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1834.221559][T29909] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1834.230919][T17745] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 1834.242592][T17745] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.255699][T17745] usb 2-1: config 0 has no interface number 0 [ 1834.276295][T29909] vhci_hcd vhci_hcd.0: Device attached [ 1834.292831][T29912] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 1834.293439][T17745] usb 2-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1834.299439][T29912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1834.311867][T29912] vhci_hcd vhci_hcd.0: Device attached [ 1834.402356][T29909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1834.412568][T17745] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1834.421880][T17745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.429990][T17745] usb 2-1: Product: syz [ 1834.454208][T17745] usb 2-1: Manufacturer: syz [ 1834.467963][T27832] vhci_hcd: vhci_device speed not set [ 1834.473505][T17745] usb 2-1: SerialNumber: syz [ 1834.486137][T29909] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(13) [ 1834.492753][T29909] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1834.508592][T29909] vhci_hcd vhci_hcd.0: Device attached [ 1834.514968][T17745] usb 2-1: config 0 descriptor?? [ 1834.529867][T17745] plusb 2-1:0.231: probe with driver plusb failed with error -22 [ 1834.538962][T29912] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(16) [ 1834.545551][T29912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1834.577659][T27832] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1834.621322][T29912] vhci_hcd vhci_hcd.0: Device attached [ 1834.630467][T29909] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(15) [ 1834.637085][T29909] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1834.698847][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1834.698863][ T30] audit: type=1326 audit(1756680041.175:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1834.704047][T29923] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1834.759577][ T30] audit: type=1326 audit(1756680041.175:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1834.772636][T29909] vhci_hcd vhci_hcd.0: Device attached [ 1834.814413][T29899] netlink: zone id is out of range [ 1834.819626][T29899] netlink: zone id is out of range [ 1834.826465][T29899] netlink: zone id is out of range [ 1834.833937][T29899] netlink: zone id is out of range [ 1834.839300][T29899] netlink: zone id is out of range [ 1834.845665][T29899] netlink: zone id is out of range [ 1834.864829][T29899] netlink: zone id is out of range [ 1834.873736][T29899] netlink: zone id is out of range [ 1834.889104][T29899] netlink: zone id is out of range [ 1834.911045][T29917] vhci_hcd: connection closed [ 1834.911245][T29915] vhci_hcd: connection closed [ 1834.917213][T29913] vhci_hcd: connection closed [ 1834.927129][ T30] audit: type=1326 audit(1756680041.185:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1834.955813][ T60] vhci_hcd: stop threads [ 1834.963516][T29910] vhci_hcd: connection reset by peer [ 1834.970309][T29899] netlink: zone id is out of range [ 1834.989121][ T60] vhci_hcd: release socket [ 1835.014855][T23539] usb 2-1: USB disconnect, device number 53 [ 1835.043275][T29919] vhci_hcd: connection closed [ 1835.068938][ T30] audit: type=1326 audit(1756680041.185:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1835.084344][ T60] vhci_hcd: disconnect device [ 1835.105764][ T30] audit: type=1326 audit(1756680041.185:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1835.134134][ T60] vhci_hcd: stop threads [ 1835.134367][ T30] audit: type=1326 audit(1756680041.185:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1835.139233][ T60] vhci_hcd: release socket [ 1835.169296][ T30] audit: type=1326 audit(1756680041.185:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1835.204820][ T30] audit: type=1326 audit(1756680041.185:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1835.234066][ T60] vhci_hcd: disconnect device [ 1835.240189][ T30] audit: type=1326 audit(1756680041.185:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1835.240282][ T60] vhci_hcd: stop threads [ 1835.271662][ T30] audit: type=1326 audit(1756680041.185:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.0.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d78ebe9 code=0x7ffc0000 [ 1835.310346][ T60] vhci_hcd: release socket [ 1835.314880][ T60] vhci_hcd: disconnect device [ 1835.324631][ T60] vhci_hcd: stop threads [ 1835.330801][ T60] vhci_hcd: release socket [ 1835.339279][ T60] vhci_hcd: disconnect device [ 1835.353124][ T60] vhci_hcd: stop threads [ 1835.370478][ T60] vhci_hcd: release socket [ 1835.375631][ T60] vhci_hcd: disconnect device [ 1839.687083][T27832] vhci_hcd: vhci_device speed not set [ 1840.491982][T29984] tipc: Enabled bearer , priority 0 [ 1840.510440][T29984] syzkaller0: entered promiscuous mode [ 1840.515914][T29984] syzkaller0: entered allmulticast mode [ 1840.593600][T29986] tipc: Resetting bearer [ 1840.614283][T29982] tipc: Resetting bearer [ 1840.786393][T29990] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6329'. [ 1840.881860][T29982] tipc: Disabling bearer [ 1841.078101][T17745] usb usb44-port1: attempt power cycle [ 1841.727534][T17745] usb usb44-port1: unable to enumerate USB device [ 1841.763927][T30001] usb usb1: usbfs: process 30001 (syz.5.6333) did not claim interface 0 before use [ 1845.957043][T17745] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1846.849202][T30053] lo speed is unknown, defaulting to 1000 [ 1847.050019][T17745] usb 6-1: Using ep0 maxpacket: 16 [ 1847.097087][T17745] usb 6-1: config index 0 descriptor too short (expected 1572, got 36) [ 1847.115508][T17745] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1847.124223][T17745] usb 6-1: config 1 has no interface number 0 [ 1847.132259][T17745] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1847.142340][T17745] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 16799, setting to 1024 [ 1847.156185][T17745] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1847.168502][T17745] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1847.182168][T17745] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1847.191331][T17745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.199601][T17745] usb 6-1: Product: syz [ 1847.203735][T17745] usb 6-1: Manufacturer: syz [ 1847.208587][T17745] usb 6-1: SerialNumber: syz [ 1847.220836][T30052] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1847.228321][T30052] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1847.236174][T30063] usb usb8: usbfs: process 30063 (syz.4.6341) did not claim interface 0 before use [ 1847.307949][T30067] tipc: Enabled bearer , priority 0 [ 1847.340752][T30065] syzkaller0: entered promiscuous mode [ 1847.381313][T30065] syzkaller0: entered allmulticast mode [ 1847.401737][T30065] tipc: Resetting bearer [ 1847.731441][T30062] tipc: Resetting bearer [ 1847.787359][T17745] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 1847.806835][T17745] usb 6-1: USB disconnect, device number 30 [ 1847.819752][T30073] netlink: 452 bytes leftover after parsing attributes in process `syz.1.6345'. [ 1847.847547][T30062] tipc: Disabling bearer [ 1851.056836][T30111] tipc: Enabled bearer , priority 0 [ 1851.158682][T30111] syzkaller0: entered promiscuous mode [ 1851.164173][T30111] syzkaller0: entered allmulticast mode [ 1851.175071][T30111] tipc: Resetting bearer [ 1851.212633][T30110] tipc: Resetting bearer [ 1851.322953][T30110] tipc: Disabling bearer [ 1851.510393][T30121] lo speed is unknown, defaulting to 1000 [ 1851.783285][T30129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1852.164199][T30138] lo speed is unknown, defaulting to 1000 [ 1852.334373][ T5861] Bluetooth: hci2: unexpected event for opcode 0x200a [ 1852.427081][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1853.480497][T30150] usb usb8: usbfs: process 30150 (syz.0.6363) did not claim interface 0 before use [ 1853.537273][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1853.610342][ T24] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 1853.718850][ T24] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1853.825950][ T24] usb 4-1: config 1 has no interface number 0 [ 1853.862450][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1853.938092][ T24] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 16799, setting to 1024 [ 1854.569697][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1854.662011][ T24] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1854.738166][ T24] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1854.898201][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.988740][ T24] usb 4-1: Product: syz [ 1854.992926][ T24] usb 4-1: Manufacturer: syz [ 1855.037499][ T24] usb 4-1: SerialNumber: syz [ 1855.075773][T30170] usb usb1: usbfs: process 30170 (syz.5.6373) did not claim interface 0 before use [ 1856.490360][ T24] usb 4-1: can't set config #1, error -71 [ 1856.501871][ T24] usb 4-1: USB disconnect, device number 69 [ 1857.763454][T30187] bridge_slave_0: left allmulticast mode [ 1857.838526][T30187] bridge_slave_0: left promiscuous mode [ 1857.851818][T30187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.002813][T30187] bridge_slave_1: left allmulticast mode [ 1858.028260][T30187] bridge_slave_1: left promiscuous mode [ 1858.050519][T30187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.477963][T30187] bond0: (slave bond_slave_0): Releasing backup interface [ 1858.700797][T30187] bond0: (slave bond_slave_1): Releasing backup interface [ 1858.742846][T30187] team0: Port device team_slave_0 removed [ 1858.793777][T30187] team0: Port device team_slave_1 removed [ 1858.802664][T30187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1858.867074][T30187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1858.893944][T30187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1858.925463][T30187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1859.099339][T30215] usb usb1: usbfs: process 30215 (syz.4.6384) did not claim interface 0 before use [ 1860.487158][T27832] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1860.647157][T27832] usb 4-1: Using ep0 maxpacket: 32 [ 1860.653992][T27832] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1860.673885][T27832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.697155][ T1621] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1860.719813][T27832] usb 4-1: config 0 descriptor?? [ 1860.729136][T27832] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1860.857063][ T1621] usb 1-1: Using ep0 maxpacket: 16 [ 1860.987143][ T1621] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 1860.998061][ T1621] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1861.156239][ T1621] usb 1-1: config 1 has no interface number 0 [ 1861.187334][ T1621] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1861.353777][ T1621] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 16799, setting to 1024 [ 1861.410623][ T1621] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1861.435626][T30235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6389'. [ 1861.438569][ T1621] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1861.456152][ T1621] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1861.467990][ T1621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.488429][ T1621] usb 1-1: Product: syz [ 1861.522462][ T1621] usb 1-1: Manufacturer: syz [ 1861.532572][T30237] lo speed is unknown, defaulting to 1000 [ 1861.538516][ T1621] usb 1-1: SerialNumber: syz [ 1861.546225][T30223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1861.549717][T30235] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6389'. [ 1861.573223][T30223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1861.637314][T27832] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1861.698161][T27832] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 1861.708547][T27832] usb 4-1: USB disconnect, device number 70 [ 1861.814935][T30237] usb usb8: usbfs: process 30237 (syz.5.6390) did not claim interface 0 before use [ 1864.092773][ T1621] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 1864.106706][ T1621] usb 1-1: USB disconnect, device number 69 [ 1864.639569][T30263] usb usb1: usbfs: process 30263 (syz.1.6397) did not claim interface 0 before use [ 1866.804186][T30278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6402'. [ 1867.385989][T30292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6404'. [ 1868.462475][T30300] netlink: 452 bytes leftover after parsing attributes in process `syz.0.6406'. [ 1868.582511][T30303] tipc: Enabled bearer , priority 0 [ 1868.592550][T30303] syzkaller0: entered promiscuous mode [ 1868.707850][T30303] syzkaller0: entered allmulticast mode [ 1868.749643][T30304] tipc: Resetting bearer [ 1868.779316][T30308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1868.789188][T30302] tipc: Resetting bearer [ 1868.949480][T30302] tipc: Disabling bearer [ 1869.909685][ T6010] tipc: Node number set to 2722882530 [ 1869.917986][ T1621] IPVS: starting estimator thread 0... [ 1870.337093][T30314] IPVS: using max 73 ests per chain, 175200 per kthread [ 1870.763646][T30327] lo speed is unknown, defaulting to 1000 [ 1871.533857][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 1871.533875][ T30] audit: type=1400 audit(1756680078.015:2419): avc: denied { ioctl } for pid=30345 comm="syz.1.6418" path="socket:[134787]" dev="sockfs" ino=134787 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1871.668116][T30344] usb usb8: usbfs: process 30344 (syz.3.6413) did not claim interface 0 before use [ 1874.396616][T30370] tipc: Enabled bearer , priority 0 [ 1874.404571][T30370] syzkaller0: entered promiscuous mode [ 1874.410056][T30370] syzkaller0: entered allmulticast mode [ 1874.427814][T30370] tipc: Resetting bearer [ 1874.452289][T30369] tipc: Resetting bearer [ 1874.525068][T30369] tipc: Disabling bearer [ 1875.346708][T30398] lo speed is unknown, defaulting to 1000 [ 1877.919740][T30411] netlink: 452 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1879.164781][T30429] tipc: Enabled bearer , priority 0 [ 1879.197364][T30429] syzkaller0: entered promiscuous mode [ 1879.211871][T30429] syzkaller0: entered allmulticast mode [ 1879.235150][T30425] lo speed is unknown, defaulting to 1000 [ 1879.245680][T30429] tipc: Resetting bearer [ 1879.575843][T30427] tipc: Resetting bearer [ 1879.618567][T30427] tipc: Disabling bearer [ 1879.795843][T30435] usb usb8: usbfs: process 30435 (syz.5.6439) did not claim interface 0 before use [ 1880.491919][T23554] IPVS: starting estimator thread 0... [ 1881.337033][T30452] IPVS: using max 35 ests per chain, 84000 per kthread [ 1881.697967][T30455] SELinux: policydb version 0 does not match my version range 15-35 [ 1881.727965][T30455] SELinux: failed to load policy [ 1882.889568][T30462] netlink: 452 bytes leftover after parsing attributes in process `syz.0.6448'. [ 1883.217594][T30467] netlink: 452 bytes leftover after parsing attributes in process `syz.5.6449'. [ 1883.518772][T30469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6451'. [ 1883.530157][T30469] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6451'. [ 1883.737209][T30473] usb usb1: usbfs: process 30473 (syz.1.6453) did not claim interface 0 before use [ 1884.407247][T30480] netlink: 'syz.0.6452': attribute type 4 has an invalid length. [ 1884.603878][T30480] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6452'. [ 1884.638487][T30481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6452'. [ 1884.852282][T23391] Bluetooth: hci2: command 0x0419 tx timeout [ 1884.882644][T30484] 9pnet_fd: Insufficient options for proto=fd [ 1884.894042][T30485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6456'. [ 1885.109006][T30487] usb usb1: usbfs: process 30487 (syz.5.6458) did not claim interface 0 before use [ 1885.681060][T30493] usb usb1: usbfs: process 30493 (syz.1.6460) did not claim interface 0 before use [ 1887.345214][T30500] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6462'. [ 1888.338126][T30514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6465'. [ 1888.501005][T30516] netlink: 452 bytes leftover after parsing attributes in process `syz.3.6466'. [ 1888.758031][T27832] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1888.953246][T27832] usb 6-1: Using ep0 maxpacket: 16 [ 1888.969672][T27832] usb 6-1: config index 0 descriptor too short (expected 1572, got 36) [ 1888.978623][T27832] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1888.986923][T27832] usb 6-1: config 1 has no interface number 0 [ 1889.022925][T27832] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1889.046471][T27832] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 40770, setting to 1024 [ 1889.106640][T27832] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1889.138621][T27832] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1889.187915][T27832] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1889.200561][T27832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.234223][T27832] usb 6-1: Product: syz [ 1889.304493][T27832] usb 6-1: Manufacturer: syz [ 1889.325112][T27832] usb 6-1: SerialNumber: syz [ 1889.366342][T30508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1889.378210][T30508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1889.846650][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1891.853907][T27832] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 1891.877343][T27832] usb 6-1: USB disconnect, device number 31 [ 1892.262074][T23391] non-paged memory [ 1892.268021][T23391] list_del corruption, ffff888035a25e80->next is LIST_POISON1 (dead000000000100) [ 1892.279409][T23391] ------------[ cut here ]------------ [ 1892.284881][T23391] kernel BUG at lib/list_debug.c:56! [ 1892.325303][T23391] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1892.331737][T23391] CPU: 0 UID: 0 PID: 23391 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1892.341255][T23391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1892.351296][T23391] Workqueue: hci2 hci_conn_timeout [ 1892.356416][T23391] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 1892.363439][T23391] Code: 48 c7 c7 40 2d 16 8c e8 2d 78 af fc 90 0f 0b 4c 89 e7 e8 12 b7 13 fd 4c 89 e2 48 89 de 48 c7 c7 a0 2d 16 8c e8 10 78 af fc 90 <0f> 0b 48 89 ef e8 f5 b6 13 fd 48 89 ea 48 89 de 48 c7 c7 00 2e 16 [ 1892.383043][T23391] RSP: 0018:ffffc90003cafb78 EFLAGS: 00010282 [ 1892.389092][T23391] RAX: 000000000000004e RBX: ffff888035a25e80 RCX: ffffffff819a4e09 [ 1892.397036][T23391] RDX: 0000000000000000 RSI: ffffffff819acca6 RDI: 0000000000000005 [ 1892.404979][T23391] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 1892.412933][T23391] R10: 0000000080000000 R11: ffffffffffff5ce0 R12: dead000000000100 [ 1892.420886][T23391] R13: dffffc0000000000 R14: ffff888077520658 R15: ffff888035a25e80 [ 1892.428832][T23391] FS: 0000000000000000(0000) GS:ffff8881246b8000(0000) knlGS:0000000000000000 [ 1892.437754][T23391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1892.444321][T23391] CR2: 000000110c3542e5 CR3: 0000000062ab6000 CR4: 00000000003526f0 [ 1892.452270][T23391] Call Trace: [ 1892.455536][T23391] [ 1892.458454][T23391] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 [ 1892.465107][T23391] hci_cancel_connect_sync+0xfa/0x2b0 [ 1892.470459][T23391] hci_abort_conn+0x15a/0x340 [ 1892.475111][T23391] hci_conn_timeout+0x1a2/0x210 [ 1892.479936][T23391] process_one_work+0x9cf/0x1b70 [ 1892.484851][T23391] ? __pfx_process_one_work+0x10/0x10 [ 1892.490210][T23391] ? assign_work+0x1a0/0x250 [ 1892.494775][T23391] worker_thread+0x6c8/0xf10 [ 1892.499347][T23391] ? __kthread_parkme+0x19e/0x250 [ 1892.504348][T23391] ? __pfx_worker_thread+0x10/0x10 [ 1892.509434][T23391] kthread+0x3c5/0x780 [ 1892.513473][T23391] ? __pfx_kthread+0x10/0x10 [ 1892.518033][T23391] ? rcu_is_watching+0x12/0xc0 [ 1892.522772][T23391] ? __pfx_kthread+0x10/0x10 [ 1892.527337][T23391] ret_from_fork+0x5d4/0x6f0 [ 1892.531926][T23391] ? __pfx_kthread+0x10/0x10 [ 1892.536487][T23391] ret_from_fork_asm+0x1a/0x30 [ 1892.541231][T23391] [ 1892.544224][T23391] Modules linked in: [ 1892.548920][T23391] ---[ end trace 0000000000000000 ]--- [ 1892.967765][T23391] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 1892.974845][T23391] Code: 48 c7 c7 40 2d 16 8c e8 2d 78 af fc 90 0f 0b 4c 89 e7 e8 12 b7 13 fd 4c 89 e2 48 89 de 48 c7 c7 a0 2d 16 8c e8 10 78 af fc 90 <0f> 0b 48 89 ef e8 f5 b6 13 fd 48 89 ea 48 89 de 48 c7 c7 00 2e 16 [ 1892.994547][T23391] RSP: 0018:ffffc90003cafb78 EFLAGS: 00010282 [ 1893.000655][T23391] RAX: 000000000000004e RBX: ffff888035a25e80 RCX: ffffffff819a4e09 [ 1893.008680][T23391] RDX: 0000000000000000 RSI: ffffffff819acca6 RDI: 0000000000000005 [ 1893.016653][T23391] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 1893.024838][T23391] R10: 0000000080000000 R11: ffffffffffff5ce0 R12: dead000000000100 [ 1893.032945][T23391] R13: dffffc0000000000 R14: ffff888077520658 R15: ffff888035a25e80 [ 1893.041450][T23391] FS: 0000000000000000(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 1893.050483][T23391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1893.057074][T23391] CR2: 00002000000b4030 CR3: 000000004c3c6000 CR4: 00000000003526f0 [ 1893.065033][T23391] Kernel panic - not syncing: Fatal exception [ 1893.071271][T23391] Kernel Offset: disabled [ 1893.075567][T23391] Rebooting in 86400 seconds..