last executing test programs: 21m28.845565293s ago: executing program 32 (id=193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 21m7.086491429s ago: executing program 33 (id=230): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 20m6.144455172s ago: executing program 34 (id=343): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000040)=0xfffffffe, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) socket(0x10, 0x3, 0x0) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r3, 0x2000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 19m25.250142227s ago: executing program 35 (id=430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x66000080) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010429bd700000", @ANYRES32=0x0, @ANYBLOB="00030000003200011c0012800c0001006d6163766c616e000c000280080007000900000008000500510fc335ac9f632684c9f99c3f4f0a4c87bbab8cb210f5de01a83d6a1a472f87c14aa6201892e6e57225effb941a907641aa02e3994193dd7e50ce8cfd1044e8287e0687b4e30679e5e1900cc4c3d7237eb85dc4bea1c1c620532aa332bfb70f1b059667188b87352c0008335ee57652bf527ce856c1e803369d0c0c4dd4f3e3534b7fe7bc5790dc83190900000000000000", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) r7 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) 18m16.670615177s ago: executing program 36 (id=556): socket(0x10, 0x3, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c000008000200", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="040601010000002b0300000000000000000000000000000081ee2ae4c6c2c192ffbe04257fbf2914913d09c7404dbecbd45d376157a99045438ed51f33e5"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r1, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) close(r1) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) 16m56.482845137s ago: executing program 37 (id=719): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec9, 0x10000, 0x0, 0xa}, &(0x7f0000000240), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7, 0x5, 0x18, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001140)) timer_create(0x2, 0x0, &(0x7f0000000040)=0x0) timer_getoverrun(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0xffffffffffffff3d, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, 0x0) 16m9.447608033s ago: executing program 38 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) tkill(0x0, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x139c}}, 0x0) 15m48.542524417s ago: executing program 39 (id=826): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x130, 0x0, 0x290, 0x0, 0x0, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x5e02, 0x70, 0x98, 0x0, {0xa803, 0xd003000000000000}}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x9}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x6000}}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x4}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x1, 0x7, 0x2, 0x2], 0x3}}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 14m20.749772824s ago: executing program 40 (id=980): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0xd45dce8b2fed42ef, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) 14m5.065182594s ago: executing program 41 (id=1016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) bind$inet(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[], 0x0) 12m10.875793351s ago: executing program 42 (id=1239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000000)="140000001a00077fb3e408000000000000000000349231bfbd260eb99711f55fc77c", 0x22) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x0, 0xc806, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0xffffffff) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400, 0x80000213, 0x0, r2}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x1, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, 0x0, 0xc800) sendmsg$SMC_PNETID_DEL(r7, 0x0, 0x0) 6m0.877347306s ago: executing program 43 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2404c005) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x80100000}]}) 5m48.647511143s ago: executing program 0 (id=2380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) 5m47.438644456s ago: executing program 0 (id=2382): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close(0x4) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 5m43.736258704s ago: executing program 0 (id=2388): r0 = socket$inet6(0x10, 0x2, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 5m42.808819184s ago: executing program 0 (id=2390): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x8, 0x7, 0x4) 5m41.828339414s ago: executing program 0 (id=2393): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 5m40.958300083s ago: executing program 0 (id=2395): syz_usb_connect(0x3, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m25.564421088s ago: executing program 5 (id=2418): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$packet(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 5m25.317912235s ago: executing program 44 (id=2395): syz_usb_connect(0x3, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m25.121041426s ago: executing program 7 (id=2420): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28440, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x400c084) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D'], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 5m22.965870955s ago: executing program 7 (id=2422): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000804) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4000010) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 5m20.288188789s ago: executing program 5 (id=2425): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x8, 0x7, 0x4) 5m19.39745706s ago: executing program 5 (id=2426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 5m18.643865993s ago: executing program 7 (id=2427): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) 5m18.218507003s ago: executing program 5 (id=2428): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r0, r0, 0x0, 0x40008) 5m17.056314249s ago: executing program 7 (id=2429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$ttys(0xc, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x9, 0xfdfffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close(r0) 5m17.0482744s ago: executing program 5 (id=2430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) 5m15.447030035s ago: executing program 5 (id=2431): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r3, &(0x7f00000014c0)=[{&(0x7f0000000200)="561700", 0x3}, {0x0}], 0x2) 5m15.084420964s ago: executing program 7 (id=2433): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b8261912ddc34d7e", 0x8}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0xc0000) 5m13.156634083s ago: executing program 7 (id=2434): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x4040400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) r3 = signalfd4(r1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x23, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0xd, 0x7, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x9, 0x19, &(0x7f00000006c0)=""/25, 0x40f00, 0xf, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0xf, 0xb2d3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map, r3, 0xd, 0x0, r4, @void, @value=r5}, 0x20) 4m59.797586971s ago: executing program 45 (id=2431): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r3, &(0x7f00000014c0)=[{&(0x7f0000000200)="561700", 0x3}, {0x0}], 0x2) 4m57.587549352s ago: executing program 46 (id=2434): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x4040400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) r3 = signalfd4(r1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x23, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0xd, 0x7, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x9, 0x19, &(0x7f00000006c0)=""/25, 0x40f00, 0xf, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0xf, 0xb2d3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map, r3, 0xd, 0x0, r4, @void, @value=r5}, 0x20) 4m1.36814274s ago: executing program 2 (id=2543): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3m53.512445733s ago: executing program 2 (id=2559): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7b}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3m52.432348178s ago: executing program 2 (id=2562): syz_usb_connect(0x0, 0x3e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xc2, 0x91, 0x49, 0x20, 0x499, 0x102a, 0x852d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x2, 0xe5, 0x1d, 0xe5, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x5, 0x7f}]}], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 3m46.739447747s ago: executing program 2 (id=2567): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x5d7d, 0x2, 0x5}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m44.855613254s ago: executing program 8 (id=2570): keyctl$clear(0x3, 0xfffffffffffffffc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, 0x0, 0x0) 3m44.670192021s ago: executing program 2 (id=2572): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) read(r0, &(0x7f0000001240)=""/4096, 0x1000) 3m43.997624564s ago: executing program 8 (id=2574): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r1, 0x141601) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x200, '\x00', 0x0, 0x0}, 0x50) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc91", 0xf0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3m43.172158202s ago: executing program 2 (id=2576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) process_vm_writev(r0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0) clock_gettime(0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000440)={{0x0, 0x3938700}}, &(0x7f0000000880)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m43.019196367s ago: executing program 8 (id=2577): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000031401002dbd700000000000090002007379fe02000000000800410073697700140033006c6f00000000000000000000000000009bb675023f11a338ea88b40946092c63c6d55e85524eb18add3373cf0b0abb85d66d13be1686b056227df28bd948d8d64bd88a60a09189439108a68a9436f8a1036356ff552964637eef9e20e8819437c8cee7ad8bc3da45a6e9b177bf697b80258be1f4e1063a3144ee1805fc93db738219a6a0dda4f4ac93c5f567ba38523ded4817fc021f1358d2c6cec72b1c4dffe1de9e6f24b71fd692e01ea11658f065f651e7"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 3m37.628557069s ago: executing program 8 (id=2583): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdir(0x0, 0x0) mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) socket(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x92) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r2}, 0x10) mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x15b, 0x0) 3m36.652247341s ago: executing program 8 (id=2587): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r1, 0x141601) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x200, '\x00', 0x0, 0x0}, 0x50) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc91", 0xf0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3m35.583653505s ago: executing program 8 (id=2590): getpid() ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000380), 0x44000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3m27.103432853s ago: executing program 47 (id=2576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) process_vm_writev(r0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0) clock_gettime(0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000440)={{0x0, 0x3938700}}, &(0x7f0000000880)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m20.013265273s ago: executing program 48 (id=2590): getpid() ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000380), 0x44000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 31.192231668s ago: executing program 9 (id=3018): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sync() syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b000000"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 19.257920187s ago: executing program 9 (id=3045): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 18.732462739s ago: executing program 3 (id=3047): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 17.964149258s ago: executing program 3 (id=3051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000040a05"], 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0xc40) 17.939545805s ago: executing program 9 (id=3052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x7c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_ACT={0x4c, 0x1, [@m_tunnel_key={0x48, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x7c}}, 0x40) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0) 17.509995742s ago: executing program 6 (id=3053): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) writev(0xffffffffffffffff, 0x0, 0x0) 17.168830271s ago: executing program 3 (id=3054): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000380)="fc") ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 16.984184254s ago: executing program 9 (id=3055): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sync() syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b000000"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 16.873955758s ago: executing program 6 (id=3056): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0xa) 16.308611839s ago: executing program 3 (id=3057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="ce") ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) 16.180127138s ago: executing program 6 (id=3058): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000080)="fc") 14.908393129s ago: executing program 6 (id=3060): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000240)=0x2, 0x4) bind$inet(r0, 0x0, 0x0) 14.016406651s ago: executing program 6 (id=3062): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 12.449291673s ago: executing program 6 (id=3066): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) writev(0xffffffffffffffff, 0x0, 0x0) 11.719956768s ago: executing program 3 (id=3069): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRESDEC], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) 10.722498631s ago: executing program 4 (id=3071): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close(0x4) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 10.609494221s ago: executing program 1 (id=3072): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x309080, 0x1) syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, &(0x7f0000000300), &(0x7f0000000200)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r3, &(0x7f00000000c0)=""/75, 0x4b) r4 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb884700000f000000000066b0a620109006ff00000000000000000000ffffac1414aafc000000000000000000000000000000010000000000000004010700000000002e0000000000000001040000000000006200053867000000840009e168000000000000000000000001020000000000004e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) sendmmsg$inet6(r4, &(0x7f00000065c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r6, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) syz_open_dev$video(0x0, 0x8, 0x80081) 7.317830397s ago: executing program 1 (id=3073): r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0xb, {0xb, 0x31, "e6045b424409e995fc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.328465069s ago: executing program 4 (id=3074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x2, 0x0, @ioapic={0x1000, 0x1, 0x200, 0xb80, 0x0, [{0xc5, 0x0, 0x7f, '\x00', 0xd6}, {0x1, 0x0, 0xd5, '\x00', 0x4}, {0x7, 0x2, 0x2, '\x00', 0x45}, {0x2, 0x5, 0xf5, '\x00', 0x10}, {0x7b, 0xa1, 0x48, '\x00', 0x7}, {0x9, 0x7, 0x68, '\x00', 0xa1}, {0xdb, 0x10, 0x0, '\x00', 0x57}, {0x3, 0x3, 0x6, '\x00', 0x96}, {0x5c, 0x1, 0x4, '\x00', 0x48}, {0x2, 0xf8, 0x8, '\x00', 0x2}, {0x2, 0x67, 0x2, '\x00', 0x2}, {0x8, 0x8, 0x37}, {0x2, 0x8, 0x40, '\x00', 0xf}, {0x5, 0x1, 0x5, '\x00', 0x8}, {0x3, 0x9, 0xf, '\x00', 0x3}, {0x6, 0x3, 0x6, '\x00', 0xf3}, {0x6, 0x1, 0x7, '\x00', 0xd5}, {0x9, 0x9, 0xa, '\x00', 0x77}, {0x8, 0xdc, 0x1}, {0x5a, 0x4, 0x8, '\x00', 0x1}, {0x2, 0xa, 0x5, '\x00', 0x4}, {0x98, 0x8, 0xd, '\x00', 0x7}, {0x4, 0x5, 0xb1, '\x00', 0x8}, {0xf, 0x5, 0x6, '\x00', 0x31}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.419225972s ago: executing program 1 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) 4.974437047s ago: executing program 4 (id=3076): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.091136271s ago: executing program 1 (id=3077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000040a05"], 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0xc40) 3.431034206s ago: executing program 4 (id=3078): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) read(r0, 0x0, 0x0) 3.205990094s ago: executing program 9 (id=3079): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.761636941s ago: executing program 1 (id=3080): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) writev(0xffffffffffffffff, 0x0, 0x0) 2.317266406s ago: executing program 4 (id=3081): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0xa) 1.679105936s ago: executing program 1 (id=3082): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x309080, 0x1) syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, &(0x7f0000000300), &(0x7f0000000200)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r3, &(0x7f00000000c0)=""/75, 0x4b) r4 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb884700000f000000000066b0a620109006ff00000000000000000000ffffac1414aafc000000000000000000000000000000010000000000000004010700000000002e0000000000000001040000000000006200053867000000840009e168000000000000000000000001020000000000004e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) sendmmsg$inet6(r4, &(0x7f00000065c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r6, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) syz_open_dev$video(0x0, 0x8, 0x80081) 1.0380392s ago: executing program 4 (id=3083): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close(0x4) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 644.404678ms ago: executing program 3 (id=3084): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 9 (id=3085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x2, 0x0, @ioapic={0x1000, 0x1, 0x200, 0xb80, 0x0, [{0xc5, 0x0, 0x7f, '\x00', 0xd6}, {0x1, 0x0, 0xd5, '\x00', 0x4}, {0x7, 0x2, 0x2, '\x00', 0x45}, {0x2, 0x5, 0xf5, '\x00', 0x10}, {0x7b, 0xa1, 0x48, '\x00', 0x7}, {0x9, 0x7, 0x68, '\x00', 0xa1}, {0xdb, 0x10, 0x0, '\x00', 0x57}, {0x3, 0x3, 0x6, '\x00', 0x96}, {0x5c, 0x1, 0x4, '\x00', 0x48}, {0x2, 0xf8, 0x8, '\x00', 0x2}, {0x2, 0x67, 0x2, '\x00', 0x2}, {0x8, 0x8, 0x37}, {0x2, 0x8, 0x40, '\x00', 0xf}, {0x5, 0x1, 0x5, '\x00', 0x8}, {0x3, 0x9, 0xf, '\x00', 0x3}, {0x6, 0x3, 0x6, '\x00', 0xf3}, {0x6, 0x1, 0x7, '\x00', 0xd5}, {0x9, 0x9, 0xa, '\x00', 0x77}, {0x8, 0xdc, 0x1}, {0x5a, 0x4, 0x8, '\x00', 0x1}, {0x2, 0xa, 0x5, '\x00', 0x4}, {0x98, 0x8, 0xd, '\x00', 0x7}, {0x4, 0x5, 0xb1, '\x00', 0x8}, {0xf, 0x5, 0x6, '\x00', 0x31}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 1376.462185][T15102] veth0_macvtap: entered promiscuous mode [ 1376.626908][T15102] veth1_macvtap: entered promiscuous mode [ 1376.872521][T15102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.885967][T15337] chnl_net:caif_netlink_parms(): no params data found [ 1377.150542][T15102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.164400][T12603] Bluetooth: hci4: command tx timeout [ 1377.242074][T15102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.251599][T15102] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.260760][T15102] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.269691][T15102] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.892198][ T5798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1377.926106][ T5798] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1377.958926][ T5798] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1377.975813][ T5798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1377.996972][ T5798] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1379.236130][T12603] Bluetooth: hci4: command tx timeout [ 1379.686716][T15337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.694507][T15337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.702125][T15337] bridge_slave_0: entered allmulticast mode [ 1379.710741][T15337] bridge_slave_0: entered promiscuous mode [ 1379.742261][T15363] chnl_net:caif_netlink_parms(): no params data found [ 1379.871476][T15337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.879518][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.889148][T15337] bridge_slave_1: entered allmulticast mode [ 1379.900868][T15337] bridge_slave_1: entered promiscuous mode [ 1380.122074][T12603] Bluetooth: hci6: command tx timeout [ 1380.528793][T15337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.660040][T15337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.095144][T15337] team0: Port device team_slave_0 added [ 1381.167995][T15337] team0: Port device team_slave_1 added [ 1381.314706][T12603] Bluetooth: hci4: command tx timeout [ 1382.026173][T15337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.034599][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.063505][T15337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.076631][T15363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.084613][T15363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.092263][T15363] bridge_slave_0: entered allmulticast mode [ 1382.100750][T15363] bridge_slave_0: entered promiscuous mode [ 1382.120728][T14928] bridge_slave_1: left allmulticast mode [ 1382.127148][T14928] bridge_slave_1: left promiscuous mode [ 1382.134210][T14928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.198322][T12603] Bluetooth: hci6: command tx timeout [ 1382.219301][T14928] bridge_slave_0: left allmulticast mode [ 1382.226122][T14928] bridge_slave_0: left promiscuous mode [ 1382.233031][T14928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.598870][T14928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.690365][T14928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.726073][T14928] bond0 (unregistering): Released all slaves [ 1382.774253][T15337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.781383][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.807775][T15337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.854828][T15363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.867794][T15363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.875677][T15363] bridge_slave_1: entered allmulticast mode [ 1382.885376][T15363] bridge_slave_1: entered promiscuous mode [ 1383.394367][T12603] Bluetooth: hci4: command tx timeout [ 1383.452391][T15363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.625229][T15363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.800625][T14928] hsr_slave_0: left promiscuous mode [ 1383.834591][T14928] hsr_slave_1: left promiscuous mode [ 1383.842628][T14928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.899785][T14928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.275188][T12603] Bluetooth: hci6: command tx timeout [ 1385.100971][T15409] atomic_op ffff8881307c1928 conn xmit_atomic 0000000000000000 [ 1385.852201][T15337] hsr_slave_0: entered promiscuous mode [ 1385.861030][T15337] hsr_slave_1: entered promiscuous mode [ 1385.870006][T15337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1385.878389][T15337] Cannot create hsr debugfs directory [ 1387.046470][T12603] Bluetooth: hci6: command tx timeout [ 1387.456476][T15363] team0: Port device team_slave_0 added [ 1387.478158][T15363] team0: Port device team_slave_1 added [ 1387.887756][T15363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.896013][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.923954][T15363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.992185][T15415] 9pnet_fd: Insufficient options for proto=fd [ 1388.168581][T15363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.176221][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.203999][T15363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.778131][T15363] hsr_slave_0: entered promiscuous mode [ 1388.792394][T15363] hsr_slave_1: entered promiscuous mode [ 1388.803268][T15363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1388.811165][T15363] Cannot create hsr debugfs directory [ 1391.448515][T15337] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1391.704983][T15337] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1392.137667][T15337] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1392.302804][T15337] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1392.651082][T15363] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1392.851133][T15363] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1392.991003][ T6654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.999432][ T6654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.025183][T15363] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1393.123300][T15363] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1393.259317][T15258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.267705][T15258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.461042][T15337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.797613][T15337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.947573][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.955131][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.259758][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.267259][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.330606][T15363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.702116][T15363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.870884][T15258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.878369][T15258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.154596][T15258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.162236][T15258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.615992][T15467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1396.623635][T15467] IPv6: NLM_F_CREATE should be set when creating new route [ 1396.820433][ T6654] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.950870][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1396.957691][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.045520][T15467] lo: entered allmulticast mode [ 1397.059647][T15467] tunl0: entered allmulticast mode [ 1397.069809][T15467] gre0: entered allmulticast mode [ 1397.209514][T15467] gretap0: entered allmulticast mode [ 1397.287459][T15467] erspan0: entered allmulticast mode [ 1397.305043][T15467] ip_vti0: entered allmulticast mode [ 1397.315799][T15467] ip6_vti0: entered allmulticast mode [ 1397.330160][T15467] sit0: entered allmulticast mode [ 1397.345466][T15467] ip6tnl0: entered allmulticast mode [ 1397.361459][T15467] ip6gre0: entered allmulticast mode [ 1397.411191][T15467] syz_tun: entered allmulticast mode [ 1397.449344][T15467] ip6gretap0: entered allmulticast mode [ 1397.468246][T15467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.477507][T15467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.489204][T15467] bridge0: entered allmulticast mode [ 1397.508789][T15467] vcan0: entered allmulticast mode [ 1397.516850][T15467] bond0: entered allmulticast mode [ 1397.522133][T15467] bond_slave_0: entered allmulticast mode [ 1397.528186][T15467] bond_slave_1: entered allmulticast mode [ 1397.544672][T15467] team0: entered allmulticast mode [ 1397.550097][T15467] team_slave_0: entered allmulticast mode [ 1397.558706][T15467] team_slave_1: entered allmulticast mode [ 1397.572535][T15467] dummy0: entered allmulticast mode [ 1397.593409][T15467] nlmon0: entered allmulticast mode [ 1397.608591][T15467] caif0: entered allmulticast mode [ 1397.615319][T15467] batadv0: entered allmulticast mode [ 1397.632671][T15467] vxcan0: entered allmulticast mode [ 1397.642411][T15467] vxcan1: entered allmulticast mode [ 1397.651823][T15467] veth0: entered allmulticast mode [ 1397.669272][T15467] veth1: entered allmulticast mode [ 1397.686538][T15467] veth0_to_bridge: entered allmulticast mode [ 1397.716625][T15467] veth1_to_bridge: entered allmulticast mode [ 1397.749848][T15467] veth0_to_bond: entered allmulticast mode [ 1397.767263][T15467] veth1_to_bond: entered allmulticast mode [ 1397.786107][T15467] veth0_to_team: entered allmulticast mode [ 1397.807058][T15467] veth1_to_team: entered allmulticast mode [ 1397.828692][T15467] veth0_to_batadv: entered allmulticast mode [ 1397.841922][T15467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.849750][T15467] batadv_slave_0: entered allmulticast mode [ 1397.867019][T15467] veth1_to_batadv: entered allmulticast mode [ 1397.882452][T15467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.890690][T15467] batadv_slave_1: entered allmulticast mode [ 1397.907529][T15467] xfrm0: entered allmulticast mode [ 1397.938609][T15467] veth0_to_hsr: entered allmulticast mode [ 1397.955790][T15467] hsr_slave_0: entered allmulticast mode [ 1397.976423][T15467] veth1_to_hsr: entered allmulticast mode [ 1398.001913][T15467] hsr_slave_1: entered allmulticast mode [ 1398.036200][T15467] hsr0: entered allmulticast mode [ 1398.050050][T15467] veth1_virt_wifi: entered allmulticast mode [ 1398.068887][T15467] veth0_virt_wifi: entered allmulticast mode [ 1398.082827][T15467] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1398.092173][T15467] veth1_vlan: entered allmulticast mode [ 1398.105231][T15467] veth0_vlan: entered allmulticast mode [ 1398.152239][T15467] vlan0: entered allmulticast mode [ 1398.161363][T15467] vlan1: entered allmulticast mode [ 1398.186716][T15467] macvlan0: entered allmulticast mode [ 1398.211788][T15467] macvlan1: entered allmulticast mode [ 1398.232450][T15467] ipvlan0: entered allmulticast mode [ 1398.239218][T15467] ipvlan1: entered allmulticast mode [ 1398.249250][T15467] veth1_macvtap: entered allmulticast mode [ 1398.262412][T15467] veth0_macvtap: entered allmulticast mode [ 1398.335466][T15467] macvtap0: entered allmulticast mode [ 1398.352726][T15467] macsec0: entered allmulticast mode [ 1398.385888][T15467] geneve0: entered allmulticast mode [ 1398.412721][T15467] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.424618][T15467] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.436609][T15467] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.445830][T15467] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.463596][T15467] geneve1: entered allmulticast mode [ 1398.569652][T15467] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1398.599250][T15467] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 1398.622749][T15467] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 1398.643931][T15467] netdevsim netdevsim9 netdevsim3: entered allmulticast mode [ 1398.684710][T15467] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 1398.746244][T15467] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 1398.838694][ T6654] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.900677][T15363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1399.030862][ T6654] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.149052][ T6654] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.878632][ T6654] bridge_slave_1: left allmulticast mode [ 1399.884759][ T6654] bridge_slave_1: left promiscuous mode [ 1399.891105][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.106459][ T6654] bridge_slave_0: left allmulticast mode [ 1400.112501][ T6654] bridge_slave_0: left promiscuous mode [ 1400.119464][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.602417][T15480] 9pnet_fd: Insufficient options for proto=fd [ 1400.649245][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.735180][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.809112][ T6654] bond0 (unregistering): Released all slaves [ 1401.298080][T15337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.714162][ T6654] hsr_slave_0: left promiscuous mode [ 1401.763398][ T6654] hsr_slave_1: left promiscuous mode [ 1401.771330][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1401.779317][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.825418][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1401.833372][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.974121][ T6654] veth1_macvtap: left promiscuous mode [ 1401.980047][ T6654] veth0_macvtap: left promiscuous mode [ 1401.987085][ T6654] veth1_vlan: left promiscuous mode [ 1401.992688][ T6654] veth0_vlan: left promiscuous mode [ 1402.946092][ T6654] team0 (unregistering): Port device team_slave_1 removed [ 1402.972094][ T6654] team0 (unregistering): Port device team_slave_0 removed [ 1403.160364][T12019] libceph: connect (1)[c::]:6789 error -101 [ 1403.166936][T12019] libceph: mon0 (1)[c::]:6789 connect error [ 1403.470685][T12019] libceph: connect (1)[c::]:6789 error -101 [ 1403.477927][T12019] libceph: mon0 (1)[c::]:6789 connect error [ 1403.673798][T15495] ceph: No mds server is up or the cluster is laggy [ 1403.699953][T15363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.953036][T15503] tipc: Started in network mode [ 1403.959817][T15503] tipc: Node identity ac14140f, cluster identity 4711 [ 1403.967570][T15503] tipc: New replicast peer: 255.255.255.255 [ 1403.977597][T15503] tipc: Enabled bearer , priority 10 [ 1404.486785][T15363] veth0_vlan: entered promiscuous mode [ 1404.618768][T15363] veth1_vlan: entered promiscuous mode [ 1405.009243][T15363] veth0_macvtap: entered promiscuous mode [ 1405.065059][T15363] veth1_macvtap: entered promiscuous mode [ 1405.093786][ T1859] tipc: Node number set to 2886997007 [ 1405.351949][T15363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.459982][T15363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.603886][T15363] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.612986][T15363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.623973][T15363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.633066][T15363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.782019][T15337] veth0_vlan: entered promiscuous mode [ 1405.890027][T15337] veth1_vlan: entered promiscuous mode [ 1406.233781][T15337] veth0_macvtap: entered promiscuous mode [ 1406.330911][T15337] veth1_macvtap: entered promiscuous mode [ 1406.596814][T15337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.707219][T15337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.795705][T15337] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.805092][T15337] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.814280][T15337] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.824258][T15337] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.513430][ T1859] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1411.782274][ T1859] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1411.792788][ T1859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.804736][ T1859] usb 10-1: Product: syz [ 1411.809293][ T1859] usb 10-1: Manufacturer: syz [ 1411.814462][ T1859] usb 10-1: SerialNumber: syz [ 1411.976381][ T1859] usb 10-1: config 0 descriptor?? [ 1412.215053][ T1859] hso 10-1:0.0: Failed to find BULK IN ep [ 1412.257946][ T1859] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1412.464542][T15568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.474921][T15568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.617685][ T8404] usb 10-1: USB disconnect, device number 11 [ 1413.793351][T15300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.801431][T15300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.110745][T15298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.118928][T15298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.694328][T15599] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2493'. [ 1414.996602][T14928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.004829][T14928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.407435][T15295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.415925][T15295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.347825][ T8404] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1417.606970][ T8404] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1417.616820][ T8404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.625368][ T8404] usb 2-1: Product: syz [ 1417.629791][ T8404] usb 2-1: Manufacturer: syz [ 1417.634866][ T8404] usb 2-1: SerialNumber: syz [ 1417.726302][ T8404] usb 2-1: config 0 descriptor?? [ 1418.007295][ T8404] hso 2-1:0.0: Failed to find BULK IN ep [ 1418.058555][ T8404] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1418.258636][T15629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.268955][T15629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.291336][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2504'. [ 1418.385459][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2504'. [ 1418.424412][ T8404] usb 2-1: USB disconnect, device number 49 [ 1418.577358][ T30] audit: type=1326 audit(1750855009.138:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.8.2504" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 1421.569949][ T8404] IPVS: starting estimator thread 0... [ 1421.654050][T15673] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1421.682056][T15677] IPVS: using max 192 ests per chain, 9600 per kthread [ 1422.953905][ T8404] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1423.230539][ T8404] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1423.240427][ T8404] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.249074][ T8404] usb 10-1: Product: syz [ 1423.253872][ T8404] usb 10-1: Manufacturer: syz [ 1423.258843][ T8404] usb 10-1: SerialNumber: syz [ 1423.288266][ T8404] usb 10-1: config 0 descriptor?? [ 1423.675175][ T8404] hso 10-1:0.0: Failed to find BULK IN ep [ 1423.747213][ T8404] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1423.877974][T15690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.888707][T15690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.107068][ T8404] usb 10-1: USB disconnect, device number 12 [ 1427.934861][ T8404] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1428.144055][ T8404] usb 9-1: Using ep0 maxpacket: 32 [ 1428.206505][ T8404] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1428.218508][ T8404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1428.232181][ T8404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1428.242964][ T8404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1428.254713][ T8404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1428.485574][ T8404] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1428.495170][ T8404] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.503755][ T8404] usb 9-1: Product: syz [ 1428.508204][ T8404] usb 9-1: Manufacturer: syz [ 1428.513318][ T8404] usb 9-1: SerialNumber: syz [ 1428.636674][ T8404] usb 9-1: config 0 descriptor?? [ 1428.805005][ T1859] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1429.088979][ T1859] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1429.089987][ T8404] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1429.098605][ T1859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.104839][ T8404] input input25: Device does not respond to id packet M [ 1429.120606][ T1859] usb 10-1: Product: syz [ 1429.125565][ T1859] usb 10-1: Manufacturer: syz [ 1429.130537][ T1859] usb 10-1: SerialNumber: syz [ 1429.195091][ T8404] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1429.201546][ T8404] input input25: Device does not respond to id packet P [ 1429.221762][ T8404] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1429.228461][ T8404] input input25: Device does not respond to id packet B [ 1429.262206][ T8404] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1429.269653][ T8404] input input25: Device does not respond to id packet N [ 1429.321125][ T8404] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1429.362467][ T1859] usb 10-1: config 0 descriptor?? [ 1429.373331][ T8404] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1429.476313][ T8404] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1429.513816][ T8404] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1429.525695][ T8404] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input25 [ 1429.622064][ T1859] hso 10-1:0.0: Failed to find BULK IN ep [ 1429.685309][ T1859] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1429.712644][ T8404] usb 9-1: USB disconnect, device number 19 [ 1429.918531][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.929333][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.054484][ T1859] usb 10-1: USB disconnect, device number 13 [ 1435.564676][ T1859] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1435.754726][ T1859] usb 9-1: Using ep0 maxpacket: 32 [ 1435.824124][ T1859] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1435.834757][ T1859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.843628][ T1859] usb 9-1: Product: syz [ 1435.848076][ T1859] usb 9-1: Manufacturer: syz [ 1435.852964][ T1859] usb 9-1: SerialNumber: syz [ 1435.974684][ T1859] usb 9-1: config 0 descriptor?? [ 1436.040446][ T1859] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1437.929431][ T1859] gspca_stk1135: reg_w 0x200 err -71 [ 1437.938667][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1437.946046][ T1859] gspca_stk1135: Sensor write failed [ 1437.954322][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1437.962468][ T1859] gspca_stk1135: Sensor write failed [ 1437.968322][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1437.975161][ T1859] gspca_stk1135: Sensor read failed [ 1437.980694][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1437.987355][ T1859] gspca_stk1135: Sensor read failed [ 1437.992784][ T1859] gspca_stk1135: Detected sensor type unknown (0x0) [ 1437.999896][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1438.006595][ T1859] gspca_stk1135: Sensor read failed [ 1438.012068][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1438.018806][ T1859] gspca_stk1135: Sensor read failed [ 1438.024391][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1438.030940][ T1859] gspca_stk1135: Sensor write failed [ 1438.037200][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1438.043852][ T1859] gspca_stk1135: Sensor write failed [ 1438.049585][ T1859] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 1438.531207][ T1859] usb 9-1: USB disconnect, device number 20 [ 1439.006251][T15822] overlayfs: missing 'lowerdir' [ 1441.253558][ T1859] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1441.456691][ T1859] usb 3-1: Using ep0 maxpacket: 32 [ 1441.499492][ T1859] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1441.508133][ T1859] usb 3-1: config 0 has no interface number 0 [ 1441.515928][ T1859] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1441.526726][ T1859] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1441.730504][ T1859] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1441.741852][ T1859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.750919][ T1859] usb 3-1: Product: syz [ 1441.756029][ T1859] usb 3-1: Manufacturer: syz [ 1441.760976][ T1859] usb 3-1: SerialNumber: syz [ 1441.957398][ T1859] usb 3-1: config 0 descriptor?? [ 1441.965902][T15841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1441.985680][T15841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1442.235981][ T1859] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1442.408032][ T7961] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1442.797217][ T1859] usb 3-1: USB disconnect, device number 109 [ 1442.858780][ T7961] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1442.870109][ T7961] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.879245][ T7961] usb 10-1: Product: syz [ 1442.884154][ T7961] usb 10-1: Manufacturer: syz [ 1442.889087][ T7961] usb 10-1: SerialNumber: syz [ 1443.207874][ T7961] usb 10-1: config 0 descriptor?? [ 1444.036097][ T7961] hso 10-1:0.0: Failed to find BULK IN ep [ 1444.105145][ T7961] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1444.294899][T15852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.307072][T15852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.018875][ T7961] usb 10-1: USB disconnect, device number 14 [ 1445.571496][T15851] udevd[15851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1447.834520][T15867] block nbd2: not configured, cannot reconfigure [ 1448.080895][T15865] overlayfs: missing 'lowerdir' [ 1448.583954][ T8404] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1448.774696][ T8404] usb 2-1: Using ep0 maxpacket: 16 [ 1448.861334][ T8404] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1448.870856][ T8404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.879349][ T8404] usb 2-1: Product: syz [ 1448.883954][ T8404] usb 2-1: Manufacturer: syz [ 1448.888810][ T8404] usb 2-1: SerialNumber: syz [ 1449.015059][ T8404] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1449.021864][ T8404] r8152-cfgselector 2-1: config 0 descriptor?? [ 1449.502978][ T7961] r8152-cfgselector 2-1: USB disconnect, device number 50 [ 1451.094011][ T7961] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1451.370063][ T7961] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1451.379875][ T7961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.388505][ T7961] usb 2-1: Product: syz [ 1451.392908][ T7961] usb 2-1: Manufacturer: syz [ 1451.397886][ T7961] usb 2-1: SerialNumber: syz [ 1451.538921][ T7961] usb 2-1: config 0 descriptor?? [ 1451.819048][ T7961] hso 2-1:0.0: Failed to find BULK IN ep [ 1451.880621][ T7961] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1452.083856][T15901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.094203][T15901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.171061][ T7961] usb 2-1: USB disconnect, device number 51 [ 1453.817805][ T7961] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1454.059856][ T7961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.071810][ T7961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.082135][ T7961] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1454.091938][ T7961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.348638][ T7961] usb 2-1: config 0 descriptor?? [ 1454.812194][ T7961] cm6533_jd 0003:0D8C:0022.004C: unknown main item tag 0x0 [ 1454.820126][ T7961] cm6533_jd 0003:0D8C:0022.004C: unknown main item tag 0x0 [ 1454.912890][ T7961] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.004C/input/input26 [ 1455.114173][ T7961] cm6533_jd 0003:0D8C:0022.004C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1455.236432][ T7961] usb 2-1: USB disconnect, device number 52 [ 1455.549442][T15928] block nbd9: not configured, cannot reconfigure [ 1456.048868][T15927] fido_id[15927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1457.703544][ T8404] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1457.973805][ T8404] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1457.983457][ T8404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.991734][ T8404] usb 2-1: Product: syz [ 1457.996392][ T8404] usb 2-1: Manufacturer: syz [ 1458.001241][ T8404] usb 2-1: SerialNumber: syz [ 1458.109460][ T8404] usb 2-1: config 0 descriptor?? [ 1458.265791][T15956] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1458.277948][T15956] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1458.379211][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.386611][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.488519][ T8404] hso 2-1:0.0: Failed to find BULK IN ep [ 1458.577516][ T8404] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1458.765589][T15948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.776071][T15948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.842293][ T8404] usb 2-1: USB disconnect, device number 53 [ 1461.619936][T15979] block nbd1: not configured, cannot reconfigure [ 1462.235956][T15984] ip6gretap1: entered promiscuous mode [ 1462.241587][T15984] ip6gretap1: entered allmulticast mode [ 1467.833270][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1467.884386][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1467.908664][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1467.937366][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1467.971129][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1468.764968][ T8404] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1469.009637][ T8404] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1469.019441][ T8404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.027935][ T8404] usb 2-1: Product: syz [ 1469.032256][ T8404] usb 2-1: Manufacturer: syz [ 1469.037096][ T8404] usb 2-1: SerialNumber: syz [ 1469.229156][ T8404] usb 2-1: config 0 descriptor?? [ 1469.511502][ T8404] hso 2-1:0.0: Failed to find BULK IN ep [ 1469.526159][ T8404] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1469.705804][T16018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.716326][T16018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.851599][ T8404] usb 2-1: USB disconnect, device number 54 [ 1470.077835][T16013] chnl_net:caif_netlink_parms(): no params data found [ 1470.113454][ T5798] Bluetooth: hci2: command tx timeout [ 1472.193510][ T5798] Bluetooth: hci2: command tx timeout [ 1472.588524][T16013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.598188][T16013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.605977][T16013] bridge_slave_0: entered allmulticast mode [ 1472.614799][T16013] bridge_slave_0: entered promiscuous mode [ 1472.798364][T16013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.806170][T16013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.813933][T16013] bridge_slave_1: entered allmulticast mode [ 1472.822744][T16013] bridge_slave_1: entered promiscuous mode [ 1473.647930][T16013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.808047][T16013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.281174][T12603] Bluetooth: hci2: command tx timeout [ 1474.298064][T16013] team0: Port device team_slave_0 added [ 1474.427988][T16013] team0: Port device team_slave_1 added [ 1475.050000][T16013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.057638][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.084473][T16013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.375779][T16013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.383327][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.410099][T16013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.582438][T16064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1475.603631][T16064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1475.620150][T16064] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1475.641331][T16064] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1475.666675][T16067] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1475.802579][T16068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2613'. [ 1475.812275][T16067] Bluetooth: hci0: command 0x0406 tx timeout [ 1476.204081][ T7961] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1476.417320][T16013] hsr_slave_0: entered promiscuous mode [ 1476.426452][T16013] hsr_slave_1: entered promiscuous mode [ 1476.454292][ T5798] Bluetooth: hci2: command tx timeout [ 1476.685146][ T7961] usb 10-1: Using ep0 maxpacket: 16 [ 1476.844517][ T7961] usb 10-1: config 0 has an invalid interface number: 107 but max is 0 [ 1476.853347][ T7961] usb 10-1: config 0 has no interface number 0 [ 1476.859905][ T7961] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1476.873293][ T7961] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1477.022753][ T7961] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1477.032626][ T7961] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1477.041333][ T7961] usb 10-1: Product: syz [ 1477.045952][ T7961] usb 10-1: Manufacturer: syz [ 1477.050859][ T7961] usb 10-1: SerialNumber: syz [ 1477.231863][ T7961] usb 10-1: config 0 descriptor?? [ 1477.290644][ T7961] keyspan 10-1:0.107: Keyspan 4 port adapter converter detected [ 1477.299826][ T7961] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 81 [ 1477.314943][ T7961] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 1 [ 1477.602580][ T7961] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1477.615703][ T7961] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 2 [ 1477.751661][ T7961] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1477.766397][ T7961] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 4 [ 1477.799232][T16067] Bluetooth: hci5: command tx timeout [ 1477.964657][ T7961] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1477.978632][ T7961] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 6 [ 1478.182376][T16062] chnl_net:caif_netlink_parms(): no params data found [ 1478.245644][ T7961] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1478.390741][ T7961] usb 10-1: USB disconnect, device number 15 [ 1478.557336][ T7961] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1478.668163][ T7961] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1478.809931][ T7961] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1478.856765][ T7961] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1478.871340][ T7961] keyspan 10-1:0.107: device disconnected [ 1479.525823][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 1479.914737][T16067] Bluetooth: hci5: command tx timeout [ 1480.051530][T16013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1480.187099][T16013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1480.317402][T16013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1480.488955][T16013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1480.820961][T16101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2619'. [ 1481.536569][T16062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.544755][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.552676][T16062] bridge_slave_0: entered allmulticast mode [ 1481.564007][T16062] bridge_slave_0: entered promiscuous mode [ 1481.792166][T16062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.800617][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.808438][T16062] bridge_slave_1: entered allmulticast mode [ 1481.817159][T16062] bridge_slave_1: entered promiscuous mode [ 1481.953841][T16067] Bluetooth: hci5: command tx timeout [ 1482.215175][T16062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.326301][T16062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.724345][T16013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.755868][T16062] team0: Port device team_slave_0 added [ 1482.912773][T16062] team0: Port device team_slave_1 added [ 1482.968634][T16013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.396628][T15295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.404399][T15295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.421740][T16062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.429697][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.456601][T16062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.574525][ T7961] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1483.677169][T15295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.684908][T15295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.730666][T16062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.738130][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.764613][T16062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.960375][ T7961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.971839][ T7961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.982175][ T7961] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1483.996235][ T7961] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1484.005808][ T7961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.034715][T16067] Bluetooth: hci5: command tx timeout [ 1484.372353][ T7961] usb 2-1: config 0 descriptor?? [ 1484.844129][T16062] hsr_slave_0: entered promiscuous mode [ 1484.857568][T16062] hsr_slave_1: entered promiscuous mode [ 1484.866526][T16062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1484.874653][T16062] Cannot create hsr debugfs directory [ 1484.948288][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1484.960864][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1484.969714][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1484.977843][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1484.985793][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1484.993888][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.001638][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.009666][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.017549][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.025430][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.033409][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.041143][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.049376][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.059857][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.068467][ T7961] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1485.869564][ T7961] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 1486.048025][ T7961] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1486.173388][ T7961] usb 2-1: USB disconnect, device number 55 [ 1487.256007][T16131] fido_id[16131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1488.484017][T15295] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.708478][T16013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.862245][T15295] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.143551][T15295] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.289433][T16062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1489.420300][T15295] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.599302][T16062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1489.774512][T16062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1490.161991][T16062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1490.652857][T15295] bridge_slave_1: left allmulticast mode [ 1490.659146][T15295] bridge_slave_1: left promiscuous mode [ 1490.666157][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.900840][T15295] bridge_slave_0: left allmulticast mode [ 1490.906835][T15295] bridge_slave_0: left promiscuous mode [ 1490.913702][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.748573][T15295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.861562][T15295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.925049][T15295] bond0 (unregistering): Released all slaves [ 1493.174195][T15295] hsr_slave_0: left promiscuous mode [ 1493.213488][T15295] hsr_slave_1: left promiscuous mode [ 1493.221916][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.230663][T15295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.326642][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.334713][T15295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.453906][T15295] veth1_macvtap: left promiscuous mode [ 1493.459751][T15295] veth0_macvtap: left promiscuous mode [ 1493.465700][T15295] veth1_vlan: left promiscuous mode [ 1493.471174][T15295] veth0_vlan: left promiscuous mode [ 1494.554552][T15295] team0 (unregistering): Port device team_slave_1 removed [ 1494.581542][T15295] team0 (unregistering): Port device team_slave_0 removed [ 1495.520342][T16062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.529423][T16013] veth0_vlan: entered promiscuous mode [ 1495.730664][T16013] veth1_vlan: entered promiscuous mode [ 1495.766963][T16062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.877139][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.885005][ T6654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.107626][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.115520][ T6654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.205110][T16013] veth0_macvtap: entered promiscuous mode [ 1496.311763][T16013] veth1_macvtap: entered promiscuous mode [ 1496.647098][T16013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.814687][T16013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.958442][T16013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.969755][T16013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.979121][T16013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.988382][T16013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.930844][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.567412][T16062] veth0_vlan: entered promiscuous mode [ 1499.703608][T16062] veth1_vlan: entered promiscuous mode [ 1500.118208][T16062] veth0_macvtap: entered promiscuous mode [ 1500.181216][T16062] veth1_macvtap: entered promiscuous mode [ 1500.419649][T16062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.530367][T16062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.620380][T16062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.631233][T16062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.640980][T16062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.650237][T16062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.406332][ T5798] Bluetooth: hci6: command 0x0406 tx timeout [ 1505.204933][T15258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.214452][T15258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.357935][T14928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.367295][T14928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.944701][ T6654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.952940][ T6654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.078372][T14928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.086601][T14928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.443436][T14726] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1510.633541][T14726] usb 4-1: device descriptor read/64, error -71 [ 1510.712249][ T30] audit: type=1326 audit(1750855101.258:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1510.735017][ T30] audit: type=1326 audit(1750855101.258:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1510.920189][ T30] audit: type=1326 audit(1750855101.378:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1510.943307][ T30] audit: type=1326 audit(1750855101.378:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1510.967813][ T30] audit: type=1326 audit(1750855101.378:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1510.990784][ T30] audit: type=1326 audit(1750855101.388:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1511.013777][ T30] audit: type=1326 audit(1750855101.388:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1511.036184][ T30] audit: type=1326 audit(1750855101.408:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1511.058692][ T30] audit: type=1326 audit(1750855101.408:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1511.084679][ T30] audit: type=1326 audit(1750855101.408:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.6.2669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1511.109267][T14726] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1511.403521][T14726] usb 4-1: device descriptor read/64, error -71 [ 1511.515260][T14726] usb usb4-port1: attempt power cycle [ 1511.904028][T14726] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1511.990823][T14726] usb 4-1: device descriptor read/8, error -71 [ 1512.263455][T14726] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1512.340849][T14726] usb 4-1: device descriptor read/8, error -71 [ 1512.456463][T14726] usb usb4-port1: unable to enumerate USB device [ 1518.045556][T16396] can0: slcan on ptm0. [ 1518.524586][T16395] can0 (unregistered): slcan off ptm0. [ 1519.837033][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1519.844020][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1519.883885][T14726] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1520.049988][T14726] usb 2-1: Using ep0 maxpacket: 32 [ 1520.115702][T14726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.126379][T14726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1520.135833][T14726] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1520.145498][T14726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.356660][T14726] usb 2-1: config 0 descriptor?? [ 1523.282562][T14726] usb 2-1: USB disconnect, device number 56 [ 1524.087095][T16450] can0: slcan on ptm0. [ 1524.341322][T16449] can0 (unregistered): slcan off ptm0. [ 1524.832281][T16456] Bluetooth: MGMT ver 1.23 [ 1527.783245][ T1859] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1527.993332][ T1859] usb 10-1: Using ep0 maxpacket: 32 [ 1528.038780][ T1859] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.049770][ T1859] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1528.059370][ T1859] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1528.073388][ T1859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.275408][ T1859] usb 10-1: config 0 descriptor?? [ 1528.797499][T16492] can0: slcan on ptm0. [ 1528.989592][T16491] can0 (unregistered): slcan off ptm0. [ 1530.762065][T16512] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1531.327547][ T1859] usb 10-1: USB disconnect, device number 16 [ 1534.043715][ T1859] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 1534.273992][ T1859] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1534.282870][ T1859] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1534.291481][ T1859] usb 10-1: config 0 has no interface number 0 [ 1534.298203][ T1859] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1534.312181][ T1859] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1534.323678][ T1859] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1534.333447][ T1859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.622087][ T1859] usb 10-1: config 0 descriptor?? [ 1535.618466][ T1859] usb 10-1: USB disconnect, device number 17 [ 1537.753435][ T1859] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1537.974659][ T1859] usb 4-1: Using ep0 maxpacket: 32 [ 1538.117198][ T1859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.127974][ T1859] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1538.137589][ T1859] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1538.147059][ T1859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.396780][ T1859] usb 4-1: config 0 descriptor?? [ 1541.074238][ T1859] usb 4-1: USB disconnect, device number 88 [ 1543.662871][T16626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2742'. [ 1543.672495][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 1545.221228][ T1859] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1545.425992][ T1859] usb 4-1: Using ep0 maxpacket: 8 [ 1545.482088][ T1859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.493722][ T1859] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1545.506691][ T1859] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1545.518722][ T1859] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1545.738453][ T1859] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1545.750311][ T1859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.758850][ T1859] usb 4-1: Product: syz [ 1545.763473][ T1859] usb 4-1: Manufacturer: syz [ 1545.768346][ T1859] usb 4-1: SerialNumber: syz [ 1545.928268][ T1859] usb 4-1: selecting invalid altsetting 1 [ 1546.287215][T15300] bridge_slave_1: left allmulticast mode [ 1546.297454][T15300] bridge_slave_1: left promiscuous mode [ 1546.304959][T15300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.321899][T15300] bridge_slave_0: left allmulticast mode [ 1546.328181][T15300] bridge_slave_0: left promiscuous mode [ 1546.342531][T15300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.361843][ T1859] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1546.368844][ T1859] cdc_ncm 4-1:1.0: bind() failure [ 1546.387363][ T1859] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1546.399879][ T1859] cdc_ncm 4-1:1.1: bind() failure [ 1546.734358][T15300] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1547.196917][ T7961] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1547.320476][T15300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.395414][T15300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.428480][ T7961] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1547.438208][ T7961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.446599][ T7961] usb 2-1: Product: syz [ 1547.450912][ T7961] usb 2-1: Manufacturer: syz [ 1547.455825][ T7961] usb 2-1: SerialNumber: syz [ 1547.496504][T15300] bond0 (unregistering): Released all slaves [ 1547.525009][T15300] bond1 (unregistering): Released all slaves [ 1547.542537][T15300] bond2 (unregistering): Released all slaves [ 1547.560198][T15300] bond3 (unregistering): Released all slaves [ 1547.597083][ T7961] usb 2-1: config 0 descriptor?? [ 1547.616692][ T7961] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1548.141338][ T7961] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1548.149683][ T7961] sq905c 2-1:0.0: Get version command failed [ 1548.156370][ T7961] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1548.474106][ T7961] usb 4-1: USB disconnect, device number 89 [ 1548.697380][T15300] hsr_slave_0: left promiscuous mode [ 1548.729540][T15300] hsr_slave_1: left promiscuous mode [ 1548.738842][T15300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.831782][T15300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.905810][T14726] usb 2-1: USB disconnect, device number 57 [ 1553.725809][ T7961] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1553.943667][ T7961] usb 2-1: Using ep0 maxpacket: 8 [ 1553.984466][ T7961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.995263][ T7961] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1554.007134][ T7961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1554.018230][ T7961] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1554.192352][ T7961] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1554.203317][ T7961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.211611][ T7961] usb 2-1: Product: syz [ 1554.216659][ T7961] usb 2-1: Manufacturer: syz [ 1554.221477][ T7961] usb 2-1: SerialNumber: syz [ 1554.392387][ T7961] usb 2-1: selecting invalid altsetting 1 [ 1554.999526][ T7961] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1555.006242][ T7961] cdc_ncm 2-1:1.0: bind() failure [ 1555.021099][ T7961] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1555.028213][ T7961] cdc_ncm 2-1:1.1: bind() failure [ 1556.660757][ T7961] usb 2-1: USB disconnect, device number 58 [ 1557.253298][T11275] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1557.510887][T11275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.521157][T11275] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1557.534676][T11275] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1557.544154][T11275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.682106][T11275] usb 5-1: config 0 descriptor?? [ 1558.143979][T11275] lenovo 0003:17EF:6067.004E: unknown main item tag 0x4 [ 1558.151351][T11275] lenovo 0003:17EF:6067.004E: item fetching failed at offset 10/11 [ 1558.208686][T11275] lenovo 0003:17EF:6067.004E: hid_parse failed [ 1558.215576][T11275] lenovo 0003:17EF:6067.004E: probe with driver lenovo failed with error -22 [ 1558.334516][T11275] usb 5-1: USB disconnect, device number 19 [ 1559.963967][T11275] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1560.164885][T11275] usb 5-1: Using ep0 maxpacket: 32 [ 1560.218365][T11275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.229144][T11275] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1560.242529][T11275] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1560.252014][T11275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.307130][T11275] usb 5-1: config 0 descriptor?? [ 1560.353605][T11275] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1560.912273][T16762] netlink: 'syz.3.2782': attribute type 4 has an invalid length. [ 1560.920671][T16762] netlink: 'syz.3.2782': attribute type 2 has an invalid length. [ 1561.593455][T11275] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1561.774351][T11275] usb 10-1: Using ep0 maxpacket: 16 [ 1561.808847][T11275] usb 10-1: config 0 has an invalid interface number: 107 but max is 0 [ 1561.817636][T11275] usb 10-1: config 0 has no interface number 0 [ 1561.824270][T11275] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1561.836368][T11275] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1561.909203][T11275] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1561.918985][T11275] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1561.927790][T11275] usb 10-1: Product: syz [ 1561.932282][T11275] usb 10-1: Manufacturer: syz [ 1561.933286][T12019] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 1561.937216][T11275] usb 10-1: SerialNumber: syz [ 1562.012692][T11275] usb 10-1: config 0 descriptor?? [ 1562.109718][T11275] keyspan 10-1:0.107: Keyspan 4 port adapter converter detected [ 1562.118159][T11275] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 81 [ 1562.132253][T11275] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 1 [ 1562.150137][T11275] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1562.168248][T11275] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 2 [ 1562.186648][T12019] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1562.195763][T12019] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1562.204559][T12019] usb 4-1: config 0 has no interface number 0 [ 1562.210935][T12019] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1562.221413][T12019] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1562.231815][T12019] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1562.241270][T12019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.340140][T12019] usb 4-1: config 0 descriptor?? [ 1562.376259][T11275] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1562.389881][T11275] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 4 [ 1562.418303][T11275] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1562.435121][T11275] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 6 [ 1562.516369][T11275] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1562.667156][T11275] usb 10-1: USB disconnect, device number 18 [ 1562.762164][T11275] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1562.912392][T11275] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1562.996745][T12019] usb 4-1: USB disconnect, device number 90 [ 1563.077549][T11275] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1563.203442][T11275] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1563.217165][T11275] keyspan 10-1:0.107: device disconnected [ 1563.538107][T14726] usb 5-1: USB disconnect, device number 20 [ 1565.413836][T16805] netlink: 'syz.1.2794': attribute type 4 has an invalid length. [ 1565.421887][T16805] netlink: 'syz.1.2794': attribute type 2 has an invalid length. [ 1565.764298][T12019] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1565.944880][T12019] usb 4-1: Using ep0 maxpacket: 8 [ 1566.016729][T12019] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.027662][T12019] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1566.039643][T12019] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1566.054252][T12019] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1566.234443][T12019] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1566.244945][T12019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.253471][T12019] usb 4-1: Product: syz [ 1566.261048][T12019] usb 4-1: Manufacturer: syz [ 1566.267169][T12019] usb 4-1: SerialNumber: syz [ 1566.381833][T12019] usb 4-1: selecting invalid altsetting 1 [ 1566.477948][T14726] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1566.723567][T14726] usb 2-1: Using ep0 maxpacket: 16 [ 1566.755803][T14726] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1566.764902][T14726] usb 2-1: config 0 has no interface number 0 [ 1566.773765][T14726] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1566.786329][T14726] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1566.821177][T12019] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1566.827822][T12019] cdc_ncm 4-1:1.0: bind() failure [ 1566.847867][T12019] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1566.855202][T12019] cdc_ncm 4-1:1.1: bind() failure [ 1567.026645][T14726] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1567.036362][T14726] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1567.045142][T14726] usb 2-1: Product: syz [ 1567.049556][T14726] usb 2-1: Manufacturer: syz [ 1567.054576][T14726] usb 2-1: SerialNumber: syz [ 1567.192206][T14726] usb 2-1: config 0 descriptor?? [ 1567.233449][T14726] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 1567.241542][T14726] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 1567.254745][T14726] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 1567.520760][T14726] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1567.534440][T14726] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 1567.624188][T14726] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1567.638102][T14726] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 1567.688687][T14726] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1567.705788][T14726] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 1567.718698][T14726] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1567.745773][T14726] usb 2-1: USB disconnect, device number 59 [ 1567.766050][T14726] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1567.797142][T14726] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1567.969742][T14726] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1568.105527][T14726] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1568.119070][T14726] keyspan 2-1:0.107: device disconnected [ 1568.895384][T12019] usb 4-1: USB disconnect, device number 91 [ 1569.383696][ T1859] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1569.603409][ T1859] usb 10-1: Using ep0 maxpacket: 32 [ 1569.663690][ T1859] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.674540][ T1859] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1569.688167][ T1859] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1569.697832][ T1859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.851384][ T1859] usb 10-1: config 0 descriptor?? [ 1569.936635][ T1859] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1570.295099][T16853] netlink: 'syz.3.2808': attribute type 4 has an invalid length. [ 1570.303813][T16853] netlink: 'syz.3.2808': attribute type 2 has an invalid length. [ 1572.230084][T14726] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1572.393875][T14726] usb 4-1: Using ep0 maxpacket: 8 [ 1572.443869][T14726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.455029][T14726] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1572.466973][T14726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1572.599528][T14726] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1572.611417][T14726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.620387][T14726] usb 4-1: Product: syz [ 1572.624930][T14726] usb 4-1: Manufacturer: syz [ 1572.629805][T14726] usb 4-1: SerialNumber: syz [ 1572.734008][ T1859] usb 10-1: USB disconnect, device number 19 [ 1573.430225][T14726] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1573.436785][T14726] cdc_ncm 4-1:1.0: bind() failure [ 1573.456160][T14726] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1573.463590][T14726] cdc_ncm 4-1:1.1: bind() failure [ 1574.429366][T16895] netlink: 'syz.6.2821': attribute type 4 has an invalid length. [ 1574.440808][T16895] netlink: 'syz.6.2821': attribute type 2 has an invalid length. [ 1575.295143][T14726] usb 4-1: USB disconnect, device number 92 [ 1575.854060][ T1859] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1576.003609][T12019] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1576.079908][ T1859] usb 5-1: Using ep0 maxpacket: 32 [ 1576.151050][ T1859] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1576.161348][ T1859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.170091][ T1859] usb 5-1: Product: syz [ 1576.174676][ T1859] usb 5-1: Manufacturer: syz [ 1576.179543][ T1859] usb 5-1: SerialNumber: syz [ 1576.233463][T12019] usb 4-1: Using ep0 maxpacket: 8 [ 1576.271480][T12019] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.282226][T12019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1576.316549][ T1859] usb 5-1: config 0 descriptor?? [ 1576.363338][ T1859] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1576.398391][T12019] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1576.411581][T12019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.420454][T12019] usb 4-1: Product: syz [ 1576.425239][T12019] usb 4-1: Manufacturer: syz [ 1576.430296][T12019] usb 4-1: SerialNumber: syz [ 1576.531841][T12019] usb 4-1: config 0 descriptor?? [ 1576.606067][T12019] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1576.833993][T12019] snd_usb_toneport 4-1:0.0: set_interface failed [ 1576.841186][T12019] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1576.851191][T12019] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1577.162855][T12019] usb 4-1: USB disconnect, device number 93 [ 1577.563668][T12019] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1577.849075][T12019] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.863149][T12019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1577.908545][T12019] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1577.918751][T12019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.927760][T12019] usb 4-1: Product: syz [ 1577.935902][T12019] usb 4-1: Manufacturer: syz [ 1577.940810][T12019] usb 4-1: SerialNumber: syz [ 1578.042835][T12019] usb 4-1: config 0 descriptor?? [ 1578.101925][ T1859] gspca_stk1135: reg_w 0x200 err -71 [ 1578.109692][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1578.116637][ T1859] gspca_stk1135: Sensor write failed [ 1578.122253][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1578.129064][ T1859] gspca_stk1135: Sensor write failed [ 1578.140546][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1578.148851][ T1859] gspca_stk1135: Sensor read failed [ 1578.154488][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1578.161068][ T1859] gspca_stk1135: Sensor read failed [ 1578.167582][ T1859] gspca_stk1135: Detected sensor type unknown (0x0) [ 1578.174739][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1578.181322][ T1859] gspca_stk1135: Sensor read failed [ 1578.187088][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1578.195897][ T1859] gspca_stk1135: Sensor read failed [ 1578.201404][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1578.208230][ T1859] gspca_stk1135: Sensor write failed [ 1578.213995][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1578.220618][ T1859] gspca_stk1135: Sensor write failed [ 1578.226613][ T1859] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1578.285745][T12019] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1578.395966][T12019] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1578.404665][T12019] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1578.431199][T12019] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1578.516303][ T1859] usb 5-1: USB disconnect, device number 21 [ 1578.592692][T12019] usb 4-1: USB disconnect, device number 94 [ 1581.288043][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.295041][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1581.329436][ T24] kworker/1:0 (24) used greatest stack depth: 4672 bytes left [ 1581.353465][T12019] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1581.415375][T11275] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1581.424345][ T8405] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1581.573976][T12019] usb 10-1: Using ep0 maxpacket: 8 [ 1581.613655][ T8405] usb 4-1: Using ep0 maxpacket: 32 [ 1581.620638][T12019] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1581.620818][T12019] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1581.620961][T12019] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1581.621113][T12019] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1581.621257][T12019] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1581.621478][T12019] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1581.683727][T12019] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.685680][T11275] usb 2-1: Using ep0 maxpacket: 32 [ 1581.769128][ T8405] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1581.782374][ T8405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.790945][ T8405] usb 4-1: Product: syz [ 1581.795461][ T8405] usb 4-1: Manufacturer: syz [ 1581.800337][ T8405] usb 4-1: SerialNumber: syz [ 1581.814158][T11275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.827015][T11275] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1581.841117][T11275] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1581.850737][T11275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.989679][ T8405] usb 4-1: config 0 descriptor?? [ 1582.039815][ T8405] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1582.066226][T11275] usb 2-1: config 0 descriptor?? [ 1582.115233][T12019] usb 10-1: usb_control_msg returned -32 [ 1582.121495][T12019] usbtmc 10-1:16.0: can't read capabilities [ 1582.181768][T11275] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1582.623952][T16971] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 1582.683623][T11275] usb 10-1: USB disconnect, device number 20 [ 1583.754723][ T8405] gspca_stk1135: reg_w 0x200 err -71 [ 1583.761519][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1583.772086][ T8405] gspca_stk1135: Sensor write failed [ 1583.778600][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1583.785296][ T8405] gspca_stk1135: Sensor write failed [ 1583.790896][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1583.797691][ T8405] gspca_stk1135: Sensor read failed [ 1583.803441][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1583.810022][ T8405] gspca_stk1135: Sensor read failed [ 1583.815599][ T8405] gspca_stk1135: Detected sensor type unknown (0x0) [ 1583.822525][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1583.829320][ T8405] gspca_stk1135: Sensor read failed [ 1583.834936][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1583.841512][ T8405] gspca_stk1135: Sensor read failed [ 1583.847184][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1583.854001][ T8405] gspca_stk1135: Sensor write failed [ 1583.859593][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1583.866266][ T8405] gspca_stk1135: Sensor write failed [ 1583.876179][ T8405] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1584.161530][ T8405] usb 4-1: USB disconnect, device number 95 [ 1585.009671][T12019] usb 2-1: USB disconnect, device number 60 [ 1586.984067][ T8405] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1587.023502][T11275] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1587.253606][T11275] usb 5-1: Using ep0 maxpacket: 32 [ 1587.261887][ T8405] usb 10-1: Using ep0 maxpacket: 8 [ 1587.295370][ T8405] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1587.304245][ T8405] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1587.314957][ T8405] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1587.325188][ T8405] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1587.335579][ T8405] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1587.349171][ T8405] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1587.360831][ T8405] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.451141][T11275] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1587.463616][T11275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.471904][T11275] usb 5-1: Product: syz [ 1587.476502][T11275] usb 5-1: Manufacturer: syz [ 1587.481372][T11275] usb 5-1: SerialNumber: syz [ 1587.651296][T11275] usb 5-1: config 0 descriptor?? [ 1587.694183][T11275] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1587.960576][ T8405] usb 10-1: usb_control_msg returned -32 [ 1587.970143][ T8405] usbtmc 10-1:16.0: can't read capabilities [ 1588.403539][T17038] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 1588.480397][ T8405] usb 10-1: USB disconnect, device number 21 [ 1589.417443][T11275] gspca_stk1135: reg_w 0x200 err -71 [ 1589.424357][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1589.430933][T11275] gspca_stk1135: Sensor write failed [ 1589.437084][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1589.443711][T11275] gspca_stk1135: Sensor write failed [ 1589.449297][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1589.455958][T11275] gspca_stk1135: Sensor read failed [ 1589.461427][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1589.468154][T11275] gspca_stk1135: Sensor read failed [ 1589.473651][T11275] gspca_stk1135: Detected sensor type unknown (0x0) [ 1589.480577][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1589.488241][T11275] gspca_stk1135: Sensor read failed [ 1589.493813][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1589.504343][T11275] gspca_stk1135: Sensor read failed [ 1589.509847][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1589.517527][T11275] gspca_stk1135: Sensor write failed [ 1589.523198][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1589.529736][T11275] gspca_stk1135: Sensor write failed [ 1589.535527][T11275] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1589.945187][T17049] netlink: 'syz.9.2872': attribute type 4 has an invalid length. [ 1589.953531][T17049] netlink: 'syz.9.2872': attribute type 2 has an invalid length. [ 1589.988977][T11275] usb 5-1: USB disconnect, device number 22 [ 1590.343589][T12019] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1590.544124][T12019] usb 4-1: Using ep0 maxpacket: 8 [ 1590.600450][T12019] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.611370][T12019] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1590.624131][T12019] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1590.754136][T12019] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1590.764084][T12019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.772493][T12019] usb 4-1: Product: syz [ 1590.777146][T12019] usb 4-1: Manufacturer: syz [ 1590.782038][T12019] usb 4-1: SerialNumber: syz [ 1591.627901][T12019] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1591.634747][T12019] cdc_ncm 4-1:1.0: bind() failure [ 1591.658404][T12019] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1591.667284][T12019] cdc_ncm 4-1:1.1: bind() failure [ 1591.701391][ T5798] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1592.485667][T11275] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1592.686658][T11275] usb 5-1: Using ep0 maxpacket: 8 [ 1592.727271][T11275] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1592.736018][T11275] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1592.746238][T11275] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1592.756668][T11275] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1592.767057][T11275] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1592.783339][T11275] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1592.792756][T11275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.084135][ T8405] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1593.225791][T17087] netlink: 'syz.1.2885': attribute type 4 has an invalid length. [ 1593.234806][T17087] netlink: 'syz.1.2885': attribute type 2 has an invalid length. [ 1593.274432][T11275] usb 5-1: usb_control_msg returned -32 [ 1593.278093][T12019] usb 4-1: USB disconnect, device number 96 [ 1593.280289][T11275] usbtmc 5-1:16.0: can't read capabilities [ 1593.322315][ T8405] usb 10-1: Using ep0 maxpacket: 32 [ 1593.389548][ T8405] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1593.401282][ T8405] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.410505][ T8405] usb 10-1: Product: syz [ 1593.415286][ T8405] usb 10-1: Manufacturer: syz [ 1593.420260][ T8405] usb 10-1: SerialNumber: syz [ 1593.524821][ T8405] usb 10-1: config 0 descriptor?? [ 1593.550640][ T8405] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1593.558295][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 1593.847789][T17077] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1593.935958][T12019] usb 5-1: USB disconnect, device number 23 [ 1595.431392][ T8405] gspca_stk1135: reg_w 0x200 err -71 [ 1595.438192][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1595.448351][ T8405] gspca_stk1135: Sensor write failed [ 1595.454858][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1595.461469][ T8405] gspca_stk1135: Sensor write failed [ 1595.467715][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1595.474603][ T8405] gspca_stk1135: Sensor read failed [ 1595.480098][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1595.486821][ T8405] gspca_stk1135: Sensor read failed [ 1595.492246][ T8405] gspca_stk1135: Detected sensor type unknown (0x0) [ 1595.499346][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1595.506025][ T8405] gspca_stk1135: Sensor read failed [ 1595.511521][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1595.518209][ T8405] gspca_stk1135: Sensor read failed [ 1595.523763][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1595.530338][ T8405] gspca_stk1135: Sensor write failed [ 1595.535988][ T8405] gspca_stk1135: serial bus timeout: status=0x00 [ 1595.546183][ T8405] gspca_stk1135: Sensor write failed [ 1595.551966][ T8405] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 1595.737408][ T5798] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1595.746238][ T5798] Bluetooth: hci0: Injecting HCI hardware error event [ 1595.759543][ T5798] Bluetooth: hci0: hardware error 0x00 [ 1595.967882][ T8405] usb 10-1: USB disconnect, device number 22 [ 1597.303731][ T1859] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1597.495854][ T1859] usb 2-1: Using ep0 maxpacket: 8 [ 1597.559491][ T1859] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.570292][ T1859] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1597.582324][ T1859] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1597.725191][T17132] netlink: 'syz.9.2898': attribute type 4 has an invalid length. [ 1597.733523][T17132] netlink: 'syz.9.2898': attribute type 2 has an invalid length. [ 1597.767527][ T1859] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1597.777283][ T1859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.791939][ T1859] usb 2-1: Product: syz [ 1597.800085][ T1859] usb 2-1: Manufacturer: syz [ 1597.806291][ T1859] usb 2-1: SerialNumber: syz [ 1597.875185][ T5798] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1598.571722][ T1859] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1598.579371][ T1859] cdc_ncm 2-1:1.0: bind() failure [ 1598.598354][ T1859] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1598.605737][ T1859] cdc_ncm 2-1:1.1: bind() failure [ 1598.687657][ T5798] Bluetooth: hci5: command 0x0406 tx timeout [ 1599.029606][ T1859] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1599.284845][ T1859] usb 10-1: Using ep0 maxpacket: 8 [ 1599.314096][ T1859] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1599.322852][ T1859] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1599.336380][ T1859] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1599.347276][ T1859] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1599.357550][ T1859] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1599.370915][ T1859] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1599.380384][ T1859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.505033][T17147] ceph: No mds server is up or the cluster is laggy [ 1599.513564][T12019] libceph: connect (1)[c::]:6789 error -101 [ 1599.520009][T12019] libceph: mon0 (1)[c::]:6789 connect error [ 1599.977488][ T1859] usb 10-1: usb_control_msg returned -32 [ 1599.983888][ T1859] usbtmc 10-1:16.0: can't read capabilities [ 1600.375081][ T8405] usb 2-1: USB disconnect, device number 61 [ 1600.636193][T17156] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 1600.690994][T11275] usb 10-1: USB disconnect, device number 23 [ 1601.433494][T11275] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1601.653652][T11275] usb 2-1: Using ep0 maxpacket: 32 [ 1601.737763][T11275] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1601.752514][T11275] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1601.762089][T11275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.886132][T11275] usb 2-1: config 0 descriptor?? [ 1601.953930][ T1859] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1601.954610][T11275] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1602.195191][ T1859] usb 4-1: Using ep0 maxpacket: 32 [ 1602.238300][ T1859] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1602.248253][ T1859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.256864][ T1859] usb 4-1: Product: syz [ 1602.261285][ T1859] usb 4-1: Manufacturer: syz [ 1602.266239][ T1859] usb 4-1: SerialNumber: syz [ 1602.361355][ T1859] usb 4-1: config 0 descriptor?? [ 1602.456482][ T1859] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1604.285601][ T1859] gspca_stk1135: reg_w 0x200 err -71 [ 1604.292330][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1604.299480][ T1859] gspca_stk1135: Sensor write failed [ 1604.305212][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1604.311741][ T1859] gspca_stk1135: Sensor write failed [ 1604.317321][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1604.324043][ T1859] gspca_stk1135: Sensor read failed [ 1604.329425][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1604.335985][ T1859] gspca_stk1135: Sensor read failed [ 1604.341295][ T1859] gspca_stk1135: Detected sensor type unknown (0x0) [ 1604.352434][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1604.359786][ T1859] gspca_stk1135: Sensor read failed [ 1604.365307][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1604.371750][ T1859] gspca_stk1135: Sensor read failed [ 1604.377177][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1604.383803][ T1859] gspca_stk1135: Sensor write failed [ 1604.389266][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1604.395819][ T1859] gspca_stk1135: Sensor write failed [ 1604.401402][ T1859] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1604.640710][T17189] netlink: 'syz.9.2911': attribute type 4 has an invalid length. [ 1604.648843][T17189] netlink: 'syz.9.2911': attribute type 2 has an invalid length. [ 1604.857170][T11275] usb 2-1: USB disconnect, device number 62 [ 1605.107306][ T1859] usb 4-1: USB disconnect, device number 97 [ 1606.512687][ T1859] libceph: connect (1)[c::]:6789 error -101 [ 1606.519431][ T1859] libceph: mon0 (1)[c::]:6789 connect error [ 1606.606569][T17204] ceph: No mds server is up or the cluster is laggy [ 1607.527210][T11275] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1607.743147][T11275] usb 10-1: Using ep0 maxpacket: 8 [ 1607.811800][T11275] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1607.820641][T11275] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1607.833368][T11275] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1607.844316][T11275] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1607.854814][T11275] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.868413][T11275] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1607.877927][T11275] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.420459][T11275] usb 10-1: usb_control_msg returned -32 [ 1608.426711][T11275] usbtmc 10-1:16.0: can't read capabilities [ 1608.872261][T17222] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 1608.954091][ T1859] usb 10-1: USB disconnect, device number 24 [ 1609.459043][T17230] netlink: 'syz.4.2923': attribute type 4 has an invalid length. [ 1609.467199][T17230] netlink: 'syz.4.2923': attribute type 2 has an invalid length. [ 1610.383912][ T1859] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1610.622214][ T1859] usb 10-1: Using ep0 maxpacket: 32 [ 1610.710617][ T1859] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1610.720617][ T1859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.729279][ T1859] usb 10-1: Product: syz [ 1610.734105][ T1859] usb 10-1: Manufacturer: syz [ 1610.739067][ T1859] usb 10-1: SerialNumber: syz [ 1610.846252][T11275] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1610.921848][ T1859] usb 10-1: config 0 descriptor?? [ 1610.963732][ T1859] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1611.053653][T11275] usb 2-1: Using ep0 maxpacket: 32 [ 1611.122474][T11275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.133154][T11275] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1611.142528][T11275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.256299][T11275] usb 2-1: config 0 descriptor?? [ 1611.338434][T11275] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1612.422190][T12019] libceph: connect (1)[c::]:6789 error -101 [ 1612.429159][T12019] libceph: mon0 (1)[c::]:6789 connect error [ 1612.614514][T17261] ceph: No mds server is up or the cluster is laggy [ 1612.924196][ T1859] gspca_stk1135: reg_w 0x200 err -71 [ 1612.930873][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.938596][ T1859] gspca_stk1135: Sensor write failed [ 1612.944598][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.956249][ T1859] gspca_stk1135: Sensor write failed [ 1612.961818][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.970044][ T1859] gspca_stk1135: Sensor read failed [ 1612.975811][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.999323][ T1859] gspca_stk1135: Sensor read failed [ 1613.018013][ T1859] gspca_stk1135: Detected sensor type unknown (0x0) [ 1613.025469][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1613.032069][ T1859] gspca_stk1135: Sensor read failed [ 1613.037771][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1613.044495][ T1859] gspca_stk1135: Sensor read failed [ 1613.050017][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1613.062168][ T1859] gspca_stk1135: Sensor write failed [ 1613.069560][ T1859] gspca_stk1135: serial bus timeout: status=0x00 [ 1613.077493][ T1859] gspca_stk1135: Sensor write failed [ 1613.083523][ T1859] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 1613.673216][ T1859] usb 10-1: USB disconnect, device number 25 [ 1613.843348][T13615] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1614.063523][T13615] usb 5-1: Using ep0 maxpacket: 8 [ 1614.198854][T13615] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1614.207625][T13615] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1614.218128][T13615] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1614.228506][T13615] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1614.238864][T13615] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1614.252359][T13615] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1614.261868][T13615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.395152][T17283] netlink: 'syz.9.2935': attribute type 4 has an invalid length. [ 1614.404462][T17283] netlink: 'syz.9.2935': attribute type 2 has an invalid length. [ 1614.728730][T11275] usb 2-1: USB disconnect, device number 63 [ 1614.812584][T13615] usb 5-1: usb_control_msg returned -32 [ 1614.818849][T13615] usbtmc 5-1:16.0: can't read capabilities [ 1615.274300][T17289] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1615.314907][T11275] usb 5-1: USB disconnect, device number 24 [ 1616.618860][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2940'. [ 1617.713632][T11275] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1617.904422][T11275] usb 2-1: Using ep0 maxpacket: 32 [ 1618.018789][T11275] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1618.028544][T11275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.037128][T11275] usb 2-1: Product: syz [ 1618.041571][T11275] usb 2-1: Manufacturer: syz [ 1618.046543][T11275] usb 2-1: SerialNumber: syz [ 1618.106559][T17320] netlink: 'syz.6.2947': attribute type 4 has an invalid length. [ 1618.115545][T17320] netlink: 'syz.6.2947': attribute type 2 has an invalid length. [ 1618.150949][T11275] usb 2-1: config 0 descriptor?? [ 1618.169244][T11275] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1618.191400][ T8405] libceph: connect (1)[c::]:6789 error -101 [ 1618.198560][ T8405] libceph: mon0 (1)[c::]:6789 connect error [ 1618.517992][T17319] ceph: No mds server is up or the cluster is laggy [ 1618.753615][ T8405] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1618.872496][T16067] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1618.973613][ T8405] usb 5-1: Using ep0 maxpacket: 32 [ 1618.997141][ T8405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.008045][ T8405] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1619.017713][ T8405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.039420][ T8405] usb 5-1: config 0 descriptor?? [ 1619.089014][ T8405] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1619.550744][T13615] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1619.827460][T13615] usb 10-1: Using ep0 maxpacket: 8 [ 1619.876767][T11275] gspca_stk1135: reg_w 0x200 err -71 [ 1619.883612][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1619.885297][T13615] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1619.890093][T11275] gspca_stk1135: Sensor write failed [ 1619.890229][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1619.898533][T13615] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1619.898685][T13615] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1619.898856][T13615] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1619.899002][T13615] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1619.899231][T13615] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1619.904559][T11275] gspca_stk1135: Sensor write failed [ 1619.904713][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1619.910986][T13615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.924903][T11275] gspca_stk1135: Sensor read failed [ 1619.925066][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1619.925141][T11275] gspca_stk1135: Sensor read failed [ 1619.925195][T11275] gspca_stk1135: Detected sensor type unknown (0x0) [ 1619.925355][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1619.925426][T11275] gspca_stk1135: Sensor read failed [ 1619.925563][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1619.925632][T11275] gspca_stk1135: Sensor read failed [ 1619.925789][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1619.925853][T11275] gspca_stk1135: Sensor write failed [ 1619.925982][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1620.063277][T11275] gspca_stk1135: Sensor write failed [ 1620.069069][T11275] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1620.393457][T13615] usb 10-1: usb_control_msg returned -32 [ 1620.399633][T13615] usbtmc 10-1:16.0: can't read capabilities [ 1620.673506][T11275] usb 2-1: USB disconnect, device number 64 [ 1620.780527][T17352] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 1620.980410][T11275] usb 10-1: USB disconnect, device number 26 [ 1621.713383][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'. [ 1622.327998][T11275] usb 5-1: USB disconnect, device number 25 [ 1622.923352][T16067] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1622.932140][T16067] Bluetooth: hci3: Injecting HCI hardware error event [ 1622.944052][T16067] Bluetooth: hci3: hardware error 0x00 [ 1623.094015][ T5798] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1623.170490][T17371] netlink: 'syz.9.2961': attribute type 4 has an invalid length. [ 1623.179003][T17371] netlink: 'syz.9.2961': attribute type 2 has an invalid length. [ 1623.937658][T11275] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1624.135663][T13615] libceph: connect (1)[c::]:6789 error -101 [ 1624.148740][T13615] libceph: mon0 (1)[c::]:6789 connect error [ 1624.153206][T11275] usb 4-1: Using ep0 maxpacket: 32 [ 1624.273882][T11275] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1624.283598][T11275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.291889][T11275] usb 4-1: Product: syz [ 1624.296715][T11275] usb 4-1: Manufacturer: syz [ 1624.301703][T11275] usb 4-1: SerialNumber: syz [ 1624.315258][T17384] ceph: No mds server is up or the cluster is laggy [ 1624.451092][T11275] usb 4-1: config 0 descriptor?? [ 1624.473822][T13615] libceph: connect (1)[c::]:6789 error -101 [ 1624.480254][T13615] libceph: mon0 (1)[c::]:6789 connect error [ 1624.491465][T11275] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1624.604138][ T8405] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1624.796825][T17400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2968'. [ 1624.808978][ T8405] usb 10-1: Using ep0 maxpacket: 8 [ 1624.859959][ T8405] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1624.869208][ T8405] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1624.879781][ T8405] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1624.890336][ T8405] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1624.900940][ T8405] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1624.915087][ T8405] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1624.924797][ T8405] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.013726][T16067] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1625.460394][ T8405] usb 10-1: usb_control_msg returned -32 [ 1625.466489][ T8405] usbtmc 10-1:16.0: can't read capabilities [ 1625.867624][T17405] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 1625.902799][T13615] usb 10-1: USB disconnect, device number 27 [ 1626.210123][T11275] gspca_stk1135: reg_w 0x200 err -71 [ 1626.216991][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1626.223739][T11275] gspca_stk1135: Sensor write failed [ 1626.229363][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1626.236848][T11275] gspca_stk1135: Sensor write failed [ 1626.242432][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1626.249133][T11275] gspca_stk1135: Sensor read failed [ 1626.254741][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1626.261305][T11275] gspca_stk1135: Sensor read failed [ 1626.270257][T11275] gspca_stk1135: Detected sensor type unknown (0x0) [ 1626.277869][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1626.284581][T11275] gspca_stk1135: Sensor read failed [ 1626.290079][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1626.296733][T11275] gspca_stk1135: Sensor read failed [ 1626.302227][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1626.308919][T11275] gspca_stk1135: Sensor write failed [ 1626.314665][T11275] gspca_stk1135: serial bus timeout: status=0x00 [ 1626.321236][T11275] gspca_stk1135: Sensor write failed [ 1626.327221][T11275] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1626.517411][ T1859] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1626.690648][T11275] usb 4-1: USB disconnect, device number 98 [ 1626.703368][ T1859] usb 2-1: Using ep0 maxpacket: 32 [ 1626.731738][ T1859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.742717][ T1859] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1626.752348][ T1859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.886425][ T1859] usb 2-1: config 0 descriptor?? [ 1626.920885][ T1859] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1627.155957][T16067] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1627.164735][T16067] Bluetooth: hci2: Injecting HCI hardware error event [ 1627.172438][ T5798] Bluetooth: hci2: hardware error 0x00 [ 1627.716863][T17427] netlink: 'syz.6.2978': attribute type 4 has an invalid length. [ 1627.725129][T17427] netlink: 'syz.6.2978': attribute type 2 has an invalid length. [ 1628.575233][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2980'. [ 1629.316340][ T5798] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1629.500581][T11275] usb 2-1: USB disconnect, device number 65 [ 1630.854056][T11275] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1630.933191][ T8405] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1631.114072][T11275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.124718][T11275] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1631.138108][T11275] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1631.147483][T11275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.163901][ T8405] usb 10-1: Using ep0 maxpacket: 8 [ 1631.213368][ T8405] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1631.221985][ T8405] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1631.232748][ T8405] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1631.243145][ T8405] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1631.253762][ T8405] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1631.267367][ T8405] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1631.277091][ T8405] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.369055][T11275] usb 2-1: config 0 descriptor?? [ 1631.852362][T11275] usbhid 2-1:0.0: can't add hid device: -71 [ 1631.859776][T11275] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1631.909368][ T8405] usb 10-1: usb_control_msg returned -32 [ 1631.915538][ T8405] usbtmc 10-1:16.0: can't read capabilities [ 1632.000668][T11275] usb 2-1: USB disconnect, device number 66 [ 1632.248992][T17465] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 1632.271682][T11275] usb 10-1: USB disconnect, device number 28 [ 1633.485602][T17475] netlink: 'syz.3.2991': attribute type 4 has an invalid length. [ 1633.493981][T17475] netlink: 'syz.3.2991': attribute type 2 has an invalid length. [ 1634.152343][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2993'. [ 1634.643893][ T1859] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1634.844661][ T1859] usb 2-1: Using ep0 maxpacket: 32 [ 1634.901498][ T1859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.913142][ T1859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.924013][ T1859] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1634.933418][ T1859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.091064][ T1859] usb 2-1: config 0 descriptor?? [ 1635.563817][ T1859] usbhid 2-1:0.0: can't add hid device: -71 [ 1635.570695][ T1859] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1635.734166][ T1859] usb 2-1: USB disconnect, device number 67 [ 1637.808338][ T1859] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1638.013385][ T1859] usb 5-1: Using ep0 maxpacket: 8 [ 1638.074901][ T1859] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1638.083685][ T1859] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1638.094053][ T1859] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1638.104363][ T1859] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1638.114814][ T1859] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1638.128520][ T1859] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1638.138034][ T1859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.703252][ T1859] usb 5-1: usb_control_msg returned -32 [ 1638.709431][ T1859] usbtmc 5-1:16.0: can't read capabilities [ 1638.875939][T17516] netlink: 'syz.1.3005': attribute type 4 has an invalid length. [ 1638.884445][T17516] netlink: 'syz.1.3005': attribute type 2 has an invalid length. [ 1639.145224][T17518] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1639.210754][T11275] usb 5-1: USB disconnect, device number 26 [ 1639.578451][T17439] delete_channel: no stack [ 1639.890130][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'. [ 1642.737159][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.737437][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1643.214955][T11275] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1643.444478][T11275] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.455235][T11275] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1643.464809][T11275] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1643.476728][T11275] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.506772][ T1859] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1643.734528][ T1859] usb 4-1: Using ep0 maxpacket: 8 [ 1643.819689][ T1859] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1643.828408][ T1859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1643.838701][ T1859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1643.848889][ T1859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1643.859534][ T1859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1643.875230][ T1859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1643.887923][ T1859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.987248][T17565] delete_channel: no stack [ 1643.993774][ T8405] usb 10-1: USB disconnect, device number 29 [ 1644.136546][T11275] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1644.467489][T11275] usb 2-1: Using ep0 maxpacket: 16 [ 1644.467640][ T1859] usb 4-1: usb_control_msg returned -32 [ 1644.479266][ T1859] usbtmc 4-1:16.0: can't read capabilities [ 1644.533912][T11275] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1644.542640][T11275] usb 2-1: config 0 has no interface number 0 [ 1644.549496][T11275] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1644.560988][T11275] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1644.817752][T11275] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1644.827415][T11275] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1644.836155][T11275] usb 2-1: Product: syz [ 1644.840587][T11275] usb 2-1: Manufacturer: syz [ 1644.845594][T11275] usb 2-1: SerialNumber: syz [ 1644.914862][T17578] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 1644.980245][ T1859] usb 4-1: USB disconnect, device number 99 [ 1645.075211][T11275] usb 2-1: config 0 descriptor?? [ 1645.095808][T11275] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 1645.108025][T11275] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 1645.118833][T11275] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 1645.385699][T11275] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1645.398089][T11275] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 1645.485582][T11275] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1645.498237][T11275] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 1645.607281][T11275] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1645.624090][T11275] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 1645.743300][T11275] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1645.864899][T11275] usb 2-1: USB disconnect, device number 68 [ 1645.956236][T11275] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1646.096030][T11275] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1646.305944][T11275] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1646.448805][T11275] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1646.462414][T11275] keyspan 2-1:0.107: device disconnected [ 1647.119411][T17586] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3026'. [ 1649.553392][T11275] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1649.828187][T11275] usb 4-1: Using ep0 maxpacket: 32 [ 1649.852410][T11275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.863990][T11275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.874387][T11275] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1649.884051][T11275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.991221][T11275] usb 4-1: config 0 descriptor?? [ 1650.505879][T11275] usbhid 4-1:0.0: can't add hid device: -71 [ 1650.512610][T11275] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1650.636020][T11275] usb 4-1: USB disconnect, device number 100 [ 1652.754488][T17627] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3038'. [ 1655.183479][ T1859] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1655.364686][ T1859] usb 2-1: device descriptor read/64, error -71 [ 1655.524553][T17659] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3051'. [ 1655.623405][ T1859] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1655.813220][ T1859] usb 2-1: device descriptor read/64, error -71 [ 1655.913920][T13615] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1655.926251][ T1859] usb usb2-port1: attempt power cycle [ 1656.153409][T13615] usb 5-1: Using ep0 maxpacket: 32 [ 1656.209887][T13615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.221465][T13615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.231809][T13615] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1656.246763][T13615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.341152][T13615] usb 5-1: config 0 descriptor?? [ 1656.364697][ T1859] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1656.467880][ T1859] usb 2-1: device descriptor read/8, error -71 [ 1656.756303][ T1859] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1656.837203][ T1859] usb 2-1: device descriptor read/8, error -71 [ 1656.847574][T13615] usbhid 5-1:0.0: can't add hid device: -71 [ 1656.854627][T13615] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1656.974334][ T1859] usb usb2-port1: unable to enumerate USB device [ 1657.284435][T13615] usb 5-1: USB disconnect, device number 27 [ 1657.513520][T11275] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1657.723535][T11275] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.734302][T11275] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1657.743789][T11275] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1657.753318][T11275] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.186480][T17678] delete_channel: no stack [ 1658.191709][ T8405] usb 10-1: USB disconnect, device number 30 [ 1660.271296][T17701] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3064'. [ 1663.483720][ T8405] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1663.715177][ T8405] usb 5-1: Using ep0 maxpacket: 32 [ 1663.745251][T16067] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1663.769252][T16067] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1663.775898][ T8405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.787735][ T8405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.797988][ T8405] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1663.807327][ T8405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.822339][ T8405] usb 5-1: config 0 descriptor?? [ 1663.863754][T16067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1663.958097][ T8404] libceph: connect (1)[c::]:6789 error -101 [ 1663.964723][ T8404] libceph: mon0 (1)[c::]:6789 connect error [ 1664.002285][T16067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1664.015313][T16067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1664.199967][T17728] ceph: No mds server is up or the cluster is laggy [ 1664.248360][ T8404] libceph: connect (1)[c::]:6789 error -101 [ 1664.257496][ T8404] libceph: mon0 (1)[c::]:6789 connect error [ 1664.536408][ T8405] usbhid 5-1:0.0: can't add hid device: -71 [ 1664.542829][ T8405] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1664.555458][ T8405] usb 5-1: USB disconnect, device number 28 [ 1666.063797][T17731] chnl_net:caif_netlink_parms(): no params data found [ 1666.113753][ T5798] Bluetooth: hci1: command tx timeout [ 1668.207168][ T5798] Bluetooth: hci1: command tx timeout [ 1668.539847][T15264] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.643748][T17731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.651393][T17731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.661977][T17731] bridge_slave_0: entered allmulticast mode [ 1668.670577][T17731] bridge_slave_0: entered promiscuous mode [ 1668.806079][T15264] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.870136][T17731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.877865][T17731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.885544][T17731] bridge_slave_1: entered allmulticast mode [ 1668.894349][T17731] bridge_slave_1: entered promiscuous mode [ 1669.058230][T15264] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.544784][T17731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.668668][T15264] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.758888][T17731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.794546][T17765] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3077'. [ 1670.273689][ T5798] Bluetooth: hci1: command tx timeout [ 1670.715024][T13615] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1670.829575][T17731] team0: Port device team_slave_0 added [ 1670.919210][T17731] team0: Port device team_slave_1 added [ 1670.927669][T15264] bridge_slave_1: left allmulticast mode [ 1670.935742][T15264] bridge_slave_1: left promiscuous mode [ 1670.942439][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.973401][T13615] usb 10-1: Using ep0 maxpacket: 32 [ 1671.037145][T13615] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1671.046536][T13615] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1671.055798][T13615] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1671.065280][T13615] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1671.075419][T13615] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1671.085607][T13615] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1671.095879][T13615] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1671.106183][T13615] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1671.123423][T13615] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1671.134504][T13615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.255577][T15264] bridge_slave_0: left allmulticast mode [ 1671.261523][T15264] bridge_slave_0: left promiscuous mode [ 1671.268570][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.706281][T13615] usb 10-1: config 0 descriptor?? [ 1672.030234][T13615] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1672.174361][T13615] usb 10-1: USB disconnect, device number 31 [ 1672.256676][T13615] usblp0: removed [ 1672.319476][T15264] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1672.364099][ T5798] Bluetooth: hci1: command tx timeout [ 1672.624355][ T8404] libceph: connect (1)[c::]:6789 error -101 [ 1672.631036][ T8404] libceph: mon0 (1)[c::]:6789 connect error [ 1672.742658][T15264] gretap0 (unregistering): left allmulticast mode [ 1672.944968][ T8404] libceph: connect (1)[c::]:6789 error -101 [ 1672.951555][ T8404] libceph: mon0 (1)[c::]:6789 connect error [ 1672.992657][T17781] ceph: No mds server is up or the cluster is laggy [ 1673.034289][T13615] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1673.243616][T13615] usb 5-1: Using ep0 maxpacket: 32 [ 1673.271755][T13615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.283697][T13615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.294039][T13615] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1673.303511][T13615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.376293][T15264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1673.395144][ T8404] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1673.410368][T13615] usb 5-1: config 0 descriptor?? [ 1673.465100][T15264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1673.539061][T15264] bond0 (unregistering): Released all slaves [ 1673.563508][T15264] bond1 (unregistering): Released all slaves [ 1673.591396][T15264] bond2 (unregistering): Released all slaves [ 1673.747250][ T8404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.757386][ T8404] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1673.770655][ T8404] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1673.781609][ T8404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.927915][ T5443] ===================================================== [ 1673.935643][ T5443] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 1673.943330][ T5443] _copy_to_iter+0xf0e/0x33f0 [ 1673.948206][ T5443] __skb_datagram_iter+0x196/0x12c0 [ 1673.954044][ T5443] skb_copy_datagram_iter+0x5b/0x1e0 [ 1673.959565][ T5443] netlink_recvmsg+0x4bb/0xfe0 [ 1673.964910][ T5443] sock_recvmsg+0x2df/0x390 [ 1673.969705][ T5443] sock_read_iter+0x2c8/0x360 [ 1673.974771][ T5443] vfs_read+0x857/0xf00 [ 1673.979186][ T5443] __x64_sys_read+0x1fb/0x4d0 [ 1673.986738][ T5443] x64_sys_call+0x39db/0x3db0 [ 1673.991659][ T5443] do_syscall_64+0xd9/0x210 [ 1673.998009][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.004267][ T5443] [ 1674.006746][ T5443] Uninit was stored to memory at: [ 1674.012105][ T5443] pskb_expand_head+0x310/0x1610 [ 1674.017388][ T5443] netlink_trim+0x496/0x500 [ 1674.022098][ T5443] netlink_broadcast_filtered+0x80/0x2370 [ 1674.028309][ T5443] nlmsg_notify+0x15b/0x2f0 [ 1674.033263][ T5443] rtnl_notify+0xba/0x100 [ 1674.037889][ T5443] wireless_nlevent_process+0xfe/0x290 [ 1674.043791][ T5443] process_scheduled_works+0xb91/0x1d80 [ 1674.049620][ T5443] worker_thread+0xedf/0x1590 [ 1674.054708][ T5443] kthread+0xd5c/0xf00 [ 1674.059001][ T5443] ret_from_fork+0x1e3/0x310 [ 1674.063917][ T5443] ret_from_fork_asm+0x1a/0x30 [ 1674.069013][ T5443] [ 1674.071456][ T5443] Uninit was stored to memory at: [ 1674.077020][ T5443] wireless_send_event+0x67f/0x1530 [ 1674.082479][ T5443] ioctl_standard_iw_point+0x12b0/0x13f0 [ 1674.091537][ T5443] compat_standard_call+0x188/0x4c0 [ 1674.099351][ T5443] wext_ioctl_dispatch+0x18f/0x7a0 [ 1674.104830][ T5443] compat_wext_handle_ioctl+0x1a1/0x300 [ 1674.110671][ T5443] compat_sock_ioctl+0x20c/0xff0 [ 1674.115992][ T5443] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1674.121816][ T5443] ia32_sys_call+0x2d07/0x42c0 [ 1674.127003][ T5443] __do_fast_syscall_32+0xb0/0x150 [ 1674.132326][ T5443] do_fast_syscall_32+0x38/0x80 [ 1674.137530][ T5443] do_SYSENTER_32+0x1f/0x30 [ 1674.142265][ T5443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1674.148943][ T5443] [ 1674.151401][ T5443] Local variable iwp created at: [ 1674.156706][ T5443] compat_standard_call+0x4a/0x4c0 [ 1674.162060][ T5443] wext_ioctl_dispatch+0x18f/0x7a0 [ 1674.167524][ T5443] [ 1674.169966][ T5443] Bytes 60-63 of 64 are uninitialized [ 1674.175614][ T5443] Memory access of size 64 starts at ffff888119c22ec0 [ 1674.182536][ T5443] Data copied to user address 00007ffddc0fccd0 [ 1674.191362][ T5443] [ 1674.194649][ T5443] CPU: 0 UID: 101 PID: 5443 Comm: dhcpcd Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 1674.206925][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1674.217553][ T5443] ===================================================== [ 1674.224830][ T5443] Disabling lock debugging due to kernel taint [ 1674.231152][ T5443] Kernel panic - not syncing: kmsan.panic set ... [ 1674.237786][ T5443] CPU: 0 UID: 101 PID: 5443 Comm: dhcpcd Tainted: G B 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 1674.251529][ T5443] Tainted: [B]=BAD_PAGE [ 1674.255813][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1674.266042][ T5443] Call Trace: [ 1674.269456][ T5443] [ 1674.272513][ T5443] __dump_stack+0x26/0x30 [ 1674.277053][ T5443] dump_stack_lvl+0x53/0x270 [ 1674.281840][ T5443] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.287891][ T5443] dump_stack+0x1e/0x25 [ 1674.292320][ T5443] panic+0x4bd/0xd50 [ 1674.296463][ T5443] kmsan_report+0x31c/0x320 [ 1674.301190][ T5443] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1674.307410][ T5443] ? kmsan_copy_to_user+0xf1/0x190 [ 1674.312774][ T5443] ? _copy_to_iter+0xf0e/0x33f0 [ 1674.317858][ T5443] ? __skb_datagram_iter+0x196/0x12c0 [ 1674.323463][ T5443] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1674.329131][ T5443] ? netlink_recvmsg+0x4bb/0xfe0 [ 1674.334260][ T5443] ? sock_recvmsg+0x2df/0x390 [ 1674.339167][ T5443] ? sock_read_iter+0x2c8/0x360 [ 1674.344229][ T5443] ? vfs_read+0x857/0xf00 [ 1674.348784][ T5443] ? __x64_sys_read+0x1fb/0x4d0 [ 1674.353843][ T5443] ? x64_sys_call+0x39db/0x3db0 [ 1674.358982][ T5443] ? do_syscall_64+0xd9/0x210 [ 1674.363837][ T5443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.370159][ T5443] ? kernel_text_address+0x10e/0x1a0 [ 1674.375645][ T5443] ? kmsan_get_metadata+0xfb/0x160 [ 1674.381005][ T5443] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.387055][ T5443] ? do_syscall_64+0xc1/0x210 [ 1674.391924][ T5443] ? filter_irq_stacks+0x49/0x190 [ 1674.397138][ T5443] ? kmsan_get_metadata+0xfb/0x160 [ 1674.402474][ T5443] ? __slab_free+0x6fb/0x9e0 [ 1674.407272][ T5443] ? kmsan_get_metadata+0xfb/0x160 [ 1674.412601][ T5443] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.418649][ T5443] kmsan_internal_check_memory+0x1e1/0x230 [ 1674.424741][ T5443] kmsan_copy_to_user+0xf1/0x190 [ 1674.429933][ T5443] _copy_to_iter+0xf0e/0x33f0 [ 1674.434795][ T5443] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1674.441383][ T5443] ? kmsan_get_metadata+0xfb/0x160 [ 1674.446715][ T5443] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.452795][ T5443] ? kmsan_get_metadata+0xfb/0x160 [ 1674.458163][ T5443] ? kmsan_save_stack_with_flags+0x11/0x60 [ 1674.464224][ T5443] ? kmsan_get_metadata+0xfb/0x160 [ 1674.469598][ T5443] __skb_datagram_iter+0x196/0x12c0 [ 1674.475042][ T5443] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1674.480920][ T5443] skb_copy_datagram_iter+0x5b/0x1e0 [ 1674.486393][ T5443] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.492433][ T5443] netlink_recvmsg+0x4bb/0xfe0 [ 1674.497417][ T5443] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1674.502947][ T5443] sock_recvmsg+0x2df/0x390 [ 1674.507700][ T5443] sock_read_iter+0x2c8/0x360 [ 1674.512607][ T5443] vfs_read+0x857/0xf00 [ 1674.517018][ T5443] ? __pfx_sock_read_iter+0x10/0x10 [ 1674.522425][ T5443] __x64_sys_read+0x1fb/0x4d0 [ 1674.527351][ T5443] x64_sys_call+0x39db/0x3db0 [ 1674.532245][ T5443] do_syscall_64+0xd9/0x210 [ 1674.536950][ T5443] ? clear_bhb_loop+0x40/0x90 [ 1674.541826][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.547923][ T5443] RIP: 0033:0x7f0b16269407 [ 1674.552484][ T5443] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1674.572303][ T5443] RSP: 002b:00007ffddc0fcc70 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1674.580928][ T5443] RAX: ffffffffffffffda RBX: 00007f0b161df740 RCX: 00007f0b16269407 [ 1674.589097][ T5443] RDX: 0000000000000800 RSI: 00007ffddc0fccd0 RDI: 0000000000000009 [ 1674.597232][ T5443] RBP: 00007ffddc0fd5c0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.605375][ T5443] R10: 0000000000000000 R11: 0000000000000202 R12: 20c49ba5e353f7cf [ 1674.613507][ T5443] R13: 00007ffddc0fccd0 R14: 0000000000000620 R15: 000000000000001e [ 1674.621688][ T5443] [ 1674.625363][ T5443] Kernel Offset: disabled [ 1674.629786][ T5443] Rebooting in 86400 seconds..