last executing test programs: 1m53.81483572s ago: executing program 3 (id=2835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0xc080) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', 0x0, 0x1008000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, 0x0, 0x0) 1m53.242119794s ago: executing program 3 (id=2837): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x4006}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x7, 0x10}) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x2, 0x2, 0x8, 0xf05}) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000008400000001000000000001", @ANYRESDEC], 0x30, 0x41}, 0x4000800) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4000004, 0x3, 0x3}, 0x10) socket(0x200000100000011, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 1m52.797024853s ago: executing program 3 (id=2839): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7ffd, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa13, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df96", 0xa8}, {0x0}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xa8, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, '8', '{i>', 0x7, "6c8f809c1a2921296da2411daf4ef7a489768413405a32a70f93f27e1bc60494e07bc0cb5c928fa06bec3e45c499ac129c25673d1b47ed282d1053e1fb49bd8cd2f5e0e49b6d91bc07a62a3ea89c016fccc4230f23cab30ea2b0db9541f110b28633b13ce754c9966c41137887644bc0ef4de548a94390f258bc866a82527793c79bcc2ec30cabb6de3933e01dc42156f9ac"}}}}}, &(0x7f0000000040)={0x1, 0x5, [0xe5f, 0xe5, 0xef5, 0xee3]}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) pipe2$watch_queue(&(0x7f0000002240), 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) syz_usb_connect(0x0, 0x107, 0x0, 0x0) 1m49.100401026s ago: executing program 3 (id=2850): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000300)="d5ea22cd", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x7, @private1, 0xb6b}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x5, @private1, 0xfd}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000180)='&', 0x1}], 0x1}}], 0x3, 0x0) listen(r0, 0x7) accept(r0, 0x0, 0x0) 1m47.883144505s ago: executing program 3 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m47.620867876s ago: executing program 3 (id=2857): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80b81, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m32.069619443s ago: executing program 32 (id=2857): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80b81, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 33.215116389s ago: executing program 0 (id=3057): creat(&(0x7f0000000440)='./file0\x00', 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000000440)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x6, 0xb, 0x800, 0x0, 0x0, 0x2, 0xd56}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 32.193869179s ago: executing program 0 (id=3059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r5, 0x4, 0x42800) r6 = dup(r5) r7 = socket(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000180)={0x0, 0x16, &(0x7f0000000080)={&(0x7f0000000580)={0xa8, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "3785a8ee535d1aea4a8a3d967e50df1601c5df16268c31959013f9a4a37879ed9a"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "22682f26a0d8473a3c1ac7505e5252d42a23ad7a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x88d0}, 0x40480d4) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) 30.355221744s ago: executing program 0 (id=3061): syz_usb_connect(0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20600, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x1e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 26.006171208s ago: executing program 0 (id=3071): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) 12.336274421s ago: executing program 5 (id=3096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7ffd, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa13, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x16, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, '8', '{i>', 0x7}}}}}, &(0x7f0000000040)={0x1, 0x5, [0xe5f, 0xe5, 0xef5, 0xee3]}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) pipe2$watch_queue(&(0x7f0000002240), 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) syz_usb_connect(0x0, 0x107, 0x0, 0x0) 11.076520272s ago: executing program 1 (id=3102): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000680)=0x80000001, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 8.234974117s ago: executing program 5 (id=3106): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0xff, "0600000000000000c64c3b6e2cc6cd2c00efffffffffffffff00"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_settime(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe0000000085000000"], &(0x7f0000000280)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 7.455374929s ago: executing program 1 (id=3108): socket(0x10, 0x803, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000380)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "30bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) 7.18733678s ago: executing program 4 (id=3109): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 6.608487132s ago: executing program 1 (id=3111): mount(0x0, 0x0, 0x0, 0x201884, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) 5.847699851s ago: executing program 2 (id=3115): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000900)="7b535573ada3dd65c74bd46564f828cb136d1a19e627ceeb65f5cfe8041a0223f59f8cc50508dd65a11a93bed4bded114277eac60df8e8a6678828ea610071c8950fd2c117300c9404b700254fb57fdcb2d32aa9f1b45a33ed7509d9a7cc078a99e2f90da836625da3920aeb49a7af59c558f081f4dfa9582fc52a2aa5b1c646f54e93912f36e17ee41cff908fac2390db3d6658a8f2042d09a4b24598a9ea294c7b83e3d2ccc4fe26307dad6d228688e222ba401f85e03810ac298e6cc611f2a4f793ee66ff40722eeaf3f0d5a97bf0c849c95a429c8f86d626335c9623ba", 0xdf}, {&(0x7f0000000800)="0049521c76032074bbe497533d12ee047eb5899a7051fd46520b3cd55a88", 0x1e}, {&(0x7f0000000a00)="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", 0xfe}, {0x0}, {0x0}, {&(0x7f0000000cc0)="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", 0xc00}, {&(0x7f0000001cc0)="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", 0xfb}], 0x7, &(0x7f0000001e40)}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x29, 0xce, &(0x7f0000000440), &(0x7f00000007c0)=0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b48, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc041}, 0x20040004) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r7, 0xc0585609, &(0x7f00000003c0)=@overlay={0x2, 0x2, 0x4, 0x4, 0xffffff81, {}, {0x5, 0x0, 0x90, 0x2, 0x5, 0xf, "a0420ee9"}, 0x2}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x80000004}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x6, 0x0, 0xc0, 0x80000002}, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x1d4, 0x3d8, 0x3d8, 0x1d4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @remote}, [0xff000000, 0x0, 0xff000000, 0xff], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'lo\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x2, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"c8b1"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0x47}}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'gretap0\x00', {}, {0xff}, 0x33, 0x75, 0x5, 0x60}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000500)="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", 0x9c17f2ac198d4b8c}], 0x1) 5.232618336s ago: executing program 4 (id=3116): syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/ptype\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000001180), 0x80) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 4.712612811s ago: executing program 2 (id=3117): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) 4.18999502s ago: executing program 1 (id=3118): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) munlock(&(0x7f000038b000/0x1000)=nil, 0x1000) 3.841161795s ago: executing program 4 (id=3119): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c0100", @ANYRES16, @ANYBLOB="00032dbd7000ffdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000104000006001600000600000500120000000000060011007500000008000b0006000000080001"], 0x19c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 3.226678148s ago: executing program 1 (id=3120): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10000, 0x7}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0x4}, 0x1c) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x700000000000000) 3.134446574s ago: executing program 4 (id=3121): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) 3.05520158s ago: executing program 5 (id=3122): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) personality(0x4000009) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000030101010000000000000000020000000c0019800800020022010000300002802c00018014000300fc02000000000000000000000000000010000400"], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x44080) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) 2.52268383s ago: executing program 0 (id=3077): sendmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @private=0xa010102}, 0x4, 0x0, 0x4, 0x3}}, 0x80, 0x0}, 0x800) r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03"], 0x50) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x191c07, 0xfffffffe, 0x0, 0x9}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') execveat$binfmt(r3, 0x0, &(0x7f0000000640)={[&(0x7f0000000480)='}^$/@;\x00', &(0x7f00000004c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0, &(0x7f00000005c0)='blkio.bfq.io_service_bytes_recursive\x00', &(0x7f0000000600)='%.\x00']}, &(0x7f0000000740)={[&(0x7f0000000680)='port1\x00', &(0x7f00000006c0)=',\x00', &(0x7f0000000700)='*.^\x00']}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000011c0)=""/109, 0x6d}], 0x1) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) 1.817602119s ago: executing program 4 (id=3123): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x2, 0x9, 0x0, {0x1, @raw_data="14349aaa1272ed6bb9f77257c2a1ee110293c686b77cc20858a24a7a98644b2cf641f9a42cfad63f70d2852b1ba866a3d2cca1cabcae66f605111944743f68b4c6193f81e00d0162afe6f347f4f67d4d11c40680739ad2ed86ea95a1cd621de9de9221cea4606bb3381f30c70c4a23ec7e541830d36d0b27ea4e6209a1542299326038221f9247e442318fadb7c9dba3b44ba9a4f006591f7cf702a682fe79b1337f860332cacfc2b33adf9c0d0a5d6f5fe14b48e8e8c9a98189720286046467e85f2614fc63d98d"}, 0x6}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2c", 0x19}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.51458869s ago: executing program 2 (id=3124): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000300)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 1.508287479s ago: executing program 0 (id=3125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x800}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$printer(r4, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0x4, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) 995.973241ms ago: executing program 4 (id=3126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f0000000680)=[{0x0, 0xa201, 0x1, &(0x7f0000000180)='\b'}, {0x0, 0x1001, 0x0, 0x0}], 0x2}) 563.825412ms ago: executing program 5 (id=3127): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r0, 0x0, 0x0, 0xcfcf) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r1, 0x8, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 288.594216ms ago: executing program 1 (id=3128): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') lseek(r3, 0x92, 0x1) write$tun(r3, &(0x7f00000006c0)={@void, @void, @ipv4=@dccp={{0x1c, 0x4, 0x3, 0x21, 0x15a, 0x64, 0x0, 0x8e, 0x21, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0x1b, 0xde, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @rand_addr=0x64010102, @multicast1, @loopback, @local]}, @noop, @timestamp_prespec={0x44, 0x4, 0x50, 0x3, 0xf}, @cipso={0x86, 0x6}, @cipso={0x86, 0x35, 0x2, [{0x0, 0x6, "a0374686"}, {0x0, 0x2}, {0x5, 0x10, "8b791a526a4501df3fce215e97c4"}, {0x7, 0x2}, {0x1, 0x5, 'lXF'}, {0x7, 0x4, "8d55"}, {0x1, 0xc, "556c28f58ff4bc156d50"}]}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6, "aa3ebf", 0x92, "74b0f4"}, "3f5246f59e067f9a1d3c8d5fafbd027eee7596450b6fe173e4fb8ada81b5e76b37fdf9de9b30e3a759f5ea0cb16dc6ee2579e3764ea2a326386bf8d446265c88d7c192b50b7b8365cbc5a977720e98fbb74c0660ddd0407d2b85e38a5fdc5d1a08f4dd336f209f1b7dff1fc33aadd4597c0a948f8e96542864af1c75e3c08fa063fd83187be4af4567f126d2d308c1d4fec3ac40187bed83fefc603495e4792becb343abd62580b5c561dc199ddaf13452318d92f8b555f84ac2c4ec1de432f3ed17c74c95dc9b8e029a1d253aa1d6e5b551f2a84331438e42c3"}}}, 0x15a) r4 = fsmount(r2, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) sendto$inet6(r5, &(0x7f0000000000)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x3f) 246.828698ms ago: executing program 2 (id=3129): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f1f3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7ccd54923f1f33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e", 0x9b}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445bc7e7", 0xd4}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336be811402a6731", 0x7e}, {&(0x7f00000021c0)="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", 0x24f}], 0x5}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)="fec6c7", 0x3}, {&(0x7f0000000940)="43ec0371da43a05cdf63e908c16498ae79837ada7660dd29f20a2d21dda74c2b3b6ee53ebec06b6d086093034de2f12cb34e5d203746ac23a1334f002cdec07fe824e6bde15ae5d2e91495c8f7fc", 0x4e}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 2 (id=3130): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) kernel console output (not intermixed with test programs): escriptor's value: 9 [ 631.376237][ T8345] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 631.400559][ T8345] usb 4-1: config 0 interface 0 has no altsetting 0 [ 631.496567][ T8345] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.519470][ T8345] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 631.560708][ T8345] usb 4-1: config 0 interface 0 has no altsetting 0 [ 631.576160][ T8345] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 631.590686][ T8345] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 631.599157][ T8345] usb 4-1: Product: syz [ 631.603393][ T8345] usb 4-1: Manufacturer: syz [ 631.607981][ T8345] usb 4-1: SerialNumber: syz [ 631.695352][ T8345] usb 4-1: config 0 descriptor?? [ 632.037127][ T8345] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 634.249688][T14632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2511'. [ 635.032160][ T5921] usb 4-1: USB disconnect, device number 55 [ 635.041488][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 635.052015][ T5921] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 636.270593][ T5921] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 636.450661][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 636.462330][ T5921] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 636.485141][ T5921] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 636.495181][ T5945] usb usb36-port1: attempt power cycle [ 636.511679][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.519722][ T5921] usb 4-1: Product: syz [ 636.535714][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 636.562067][T14655] veth1_vlan: entered allmulticast mode [ 636.580054][ T5921] usb 4-1: Manufacturer: syz [ 636.594707][ T5921] usb 4-1: SerialNumber: syz [ 636.624934][ T5921] usb 4-1: config 0 descriptor?? [ 636.661744][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 636.807726][T14660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2519'. [ 637.036513][ T8345] usb 4-1: USB disconnect, device number 56 [ 637.123570][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 637.139526][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 637.159454][ T24] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 637.190612][ T24] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 637.217472][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.219421][T14660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.257328][T14660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.262781][ T24] usb 5-1: config 1 has no interface number 1 [ 637.277627][ T5945] usb usb36-port1: unable to enumerate USB device [ 637.295560][ T24] usb 5-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 637.320702][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 637.331856][ T24] usb 5-1: config 1 interface 4 has no altsetting 0 [ 637.350900][ T5890] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 637.399723][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.409262][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.417374][ T24] usb 5-1: Product: syz [ 637.421684][ T24] usb 5-1: Manufacturer: syz [ 637.426300][ T24] usb 5-1: SerialNumber: syz [ 637.503106][T14666] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2520'. [ 637.686806][T14650] tmpfs: Bad value for 'huge' [ 637.835186][ T24] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 637.865394][ T24] usb 5-1: USB disconnect, device number 60 [ 637.910075][T13892] udevd[13892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.196721][T14673] tmpfs: Bad value for 'huge' [ 641.100594][ T5945] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 641.167780][ T5817] Bluetooth: hci4: unexpected event for opcode 0x0c24 [ 641.250528][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 641.288672][ T5945] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.307680][ T5945] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 641.369719][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.386329][T14720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.394505][ T5945] usb 1-1: Product: syz [ 641.399692][ T5945] usb 1-1: Manufacturer: syz [ 641.409071][ T5945] usb 1-1: SerialNumber: syz [ 641.416774][ T5945] usb 1-1: config 0 descriptor?? [ 641.424546][T14720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.638708][ T5890] usb 1-1: USB disconnect, device number 56 [ 642.714419][ T30] audit: type=1400 audit(1770589306.856:1086): avc: denied { write } for pid=14729 comm="syz.3.2537" path="socket:[54231]" dev="sockfs" ino=54231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 643.164208][T14737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.330407][ T30] audit: type=1400 audit(1770589307.346:1087): avc: denied { ioctl } for pid=14734 comm="syz.4.2539" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 643.729051][T14744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2541'. [ 644.190547][ T5890] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 644.340555][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 644.350989][ T5890] usb 4-1: no configurations [ 644.358759][ T5890] usb 4-1: can't read configurations, error -22 [ 644.500566][ T5890] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 644.680679][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 644.712207][ T5890] usb 4-1: no configurations [ 644.719657][ T5890] usb 4-1: can't read configurations, error -22 [ 644.733156][ T5890] usb usb4-port1: attempt power cycle [ 644.851452][ T8345] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 644.950553][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 645.010530][ T8345] usb 2-1: Using ep0 maxpacket: 32 [ 645.022962][ T8345] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 645.041340][ T8345] usb 2-1: config 0 has no interface number 0 [ 645.047437][ T8345] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.080651][ T8345] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 645.100569][ T5890] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 645.108202][ T8345] usb 2-1: config 0 interface 85 has no altsetting 0 [ 645.116848][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.130590][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.142188][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 645.147449][ T8345] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 645.157012][ T5890] usb 4-1: no configurations [ 645.162430][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 645.171499][ T5890] usb 4-1: can't read configurations, error -22 [ 645.177743][ T8345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.186436][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.194956][ T8345] usb 2-1: Product: syz [ 645.199114][ T8345] usb 2-1: Manufacturer: syz [ 645.205766][ T10] usb 5-1: config 0 descriptor?? [ 645.210902][ T8345] usb 2-1: SerialNumber: syz [ 645.223260][ T8345] usb 2-1: config 0 descriptor?? [ 645.312773][ T5890] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 645.362362][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 645.403547][ T5890] usb 4-1: no configurations [ 645.408186][ T5890] usb 4-1: can't read configurations, error -22 [ 645.425865][ T5890] usb usb4-port1: unable to enumerate USB device [ 645.468623][ T8345] appletouch 2-1:0.85: Failed to read mode from device. [ 645.476236][ T8345] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 646.077395][ T8345] usb 2-1: USB disconnect, device number 50 [ 646.098791][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 646.186572][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.206784][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.224084][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'. [ 648.337479][ T24] usb 5-1: USB disconnect, device number 61 [ 648.492307][ T5945] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 648.671900][ T5921] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 648.696267][ T5945] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 648.710877][ T5945] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 648.720098][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 648.729574][ T5945] usb 4-1: SerialNumber: syz [ 648.838039][ T5921] usb 2-1: device descriptor read/64, error -71 [ 649.502471][ T5921] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 649.600063][T14838] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2567'. [ 649.627204][T14838] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2567'. [ 649.686067][ T5921] usb 2-1: device descriptor read/64, error -71 [ 649.701473][ T5945] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 649.783349][T14841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2568'. [ 649.810796][ T5921] usb usb2-port1: attempt power cycle [ 649.933038][ T8345] usb 4-1: USB disconnect, device number 61 [ 649.963642][ T8345] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 650.270724][ T5921] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 650.293876][ T5945] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 650.646794][ T5921] usb 2-1: device descriptor read/8, error -71 [ 650.845276][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 650.852912][ T5945] usb 5-1: no configurations [ 650.857505][ T5945] usb 5-1: can't read configurations, error -22 [ 650.990729][ T5921] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 651.000596][ T5945] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 651.059327][ T5921] usb 2-1: device descriptor read/8, error -71 [ 651.170538][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 651.196962][ T5945] usb 5-1: no configurations [ 651.397334][ T5921] usb usb2-port1: unable to enumerate USB device [ 651.411812][ T5945] usb 5-1: can't read configurations, error -22 [ 651.432419][ T5945] usb usb5-port1: attempt power cycle [ 651.820571][ T5945] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 651.871062][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 651.880887][ T5945] usb 5-1: no configurations [ 651.885505][ T5945] usb 5-1: can't read configurations, error -22 [ 652.030843][ T5945] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 652.052258][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 652.059634][ T5945] usb 5-1: no configurations [ 652.065869][ T5945] usb 5-1: can't read configurations, error -22 [ 652.324944][ T5945] usb usb5-port1: unable to enumerate USB device [ 652.576669][T14903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.150608][ T8345] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 653.311895][ T8345] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 653.340753][ T8345] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 653.375605][ T8345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 653.394740][ T8345] usb 1-1: SerialNumber: syz [ 653.436455][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2586'. [ 653.510093][T14923] bridge1: port 1(veth5) entered blocking state [ 653.529140][T14923] bridge1: port 1(veth5) entered disabled state [ 653.547010][T14923] veth5: entered allmulticast mode [ 653.560626][T14923] veth5: entered promiscuous mode [ 654.303783][ T8345] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 654.654625][ T8345] usb-storage 1-1:1.0: USB Mass Storage device detected [ 654.676691][ T8345] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 655.588703][T14946] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2593'. [ 655.671872][ T8345] usb 1-1: USB disconnect, device number 57 [ 655.930589][ T5921] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 655.938320][ T5945] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 655.990602][ T8345] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 656.110603][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 656.115834][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 656.122258][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.132585][ T5921] usb 2-1: config 0 has no interfaces? [ 656.138086][ T5921] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 656.140542][ T8345] usb 1-1: Using ep0 maxpacket: 32 [ 656.147693][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.155643][ T8345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.160820][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.184763][ T8345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.185697][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.195080][ T8345] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 656.206459][ T5921] usb 2-1: config 0 descriptor?? [ 656.213716][ T8345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.219670][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 656.234801][ T8345] usb 1-1: config 0 descriptor?? [ 656.247370][ T5945] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 656.256003][ T8345] hub 1-1:0.0: USB hub found [ 656.263011][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.272871][ T5945] usb 5-1: config 0 descriptor?? [ 656.586879][ T8345] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 657.095732][ T8345] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 657.144282][ T5945] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0007/input/input51 [ 657.341948][ T5945] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0007/input/input52 [ 658.400997][T14983] tipc: Enabling of bearer rejected, already enabled [ 658.556996][T14946] usb 1-1: reset high-speed USB device number 58 using dummy_hcd [ 658.958332][ T8345] usb 1-1: USB disconnect, device number 58 [ 658.973523][T14946] usbhid 1-1:0.0: reset_resume error -19 [ 659.275726][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2606'. [ 659.378470][ T5945] kye 0003:0458:5011.0007: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 659.454972][ T5945] usb 5-1: USB disconnect, device number 66 [ 659.499769][T14996] fido_id[14996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 659.509431][ T10] usb 2-1: USB disconnect, device number 55 [ 659.537836][T14995] bridge2: port 1(veth5) entered blocking state [ 659.552423][T14995] bridge2: port 1(veth5) entered disabled state [ 659.571551][T14995] veth5: entered allmulticast mode [ 659.578212][T14995] veth5: entered promiscuous mode [ 660.396025][T15007] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2609'. [ 660.734592][T15012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2612'. [ 661.712971][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 662.009127][ T10] usb 5-1: no configurations [ 662.013822][ T10] usb 5-1: can't read configurations, error -22 [ 662.168028][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 662.433017][ T10] usb 5-1: no configurations [ 662.437645][ T10] usb 5-1: can't read configurations, error -22 [ 662.620789][ T10] usb usb5-port1: attempt power cycle [ 663.040544][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 663.048248][T13575] Bluetooth: hci4: command 0x0406 tx timeout [ 663.088496][ T10] usb 5-1: no configurations [ 663.093178][ T10] usb 5-1: can't read configurations, error -22 [ 663.270623][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 663.302088][ T10] usb 5-1: no configurations [ 663.306805][ T10] usb 5-1: can't read configurations, error -22 [ 663.314389][ T10] usb usb5-port1: unable to enumerate USB device [ 663.840892][T15027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.194604][T15056] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2623'. [ 664.530031][ T5945] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 664.727000][T15060] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2624'. [ 664.736178][T15060] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2624'. [ 664.766441][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 664.777327][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.803993][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.829994][ T5945] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 664.840225][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.886786][ T5945] usb 5-1: config 0 descriptor?? [ 664.915264][ T5945] hub 5-1:0.0: USB hub found [ 665.150546][ T5945] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 665.558217][ T5945] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 665.827970][ T10] usb 5-1: USB disconnect, device number 71 [ 665.904907][T15075] fido_id[15075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 665.986075][T15010] Set syz1 is full, maxelem 65536 reached [ 666.288341][T15086] netlink: 'syz.3.2629': attribute type 4 has an invalid length. [ 666.296385][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 666.466119][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 666.474930][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.486176][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.496836][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 666.512866][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.534546][ T10] usb 5-1: config 0 descriptor?? [ 666.559690][ T10] hub 5-1:0.0: USB hub found [ 666.620664][ T8345] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 666.751295][ T10] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 666.763082][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 666.769075][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 666.776973][ T8345] usb 4-1: Using ep0 maxpacket: 16 [ 666.784946][ T8345] usb 4-1: config 0 has no interfaces? [ 666.792304][ T8345] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 666.802649][ T10] usb 5-1: USB disconnect, device number 72 [ 666.808899][ T8345] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 666.819798][ T8345] usb 4-1: Manufacturer: syz [ 666.825995][ T8345] usb 4-1: config 0 descriptor?? [ 668.706283][T15105] netlink: 'syz.0.2635': attribute type 10 has an invalid length. [ 668.818946][T15105] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 669.227220][ T5945] usb 4-1: USB disconnect, device number 62 [ 669.920779][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 670.085085][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 670.520385][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 670.539856][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 670.571500][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 670.680139][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 670.689750][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 670.701375][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 670.900180][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 670.920223][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 670.938491][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 670.955717][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 670.965905][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.014650][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.034066][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.043319][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.061138][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.082107][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.100077][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.260424][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.714266][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.723606][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.734807][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.745346][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.767433][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.791957][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.814627][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 671.832881][ T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 671.860917][ T10] usb 4-1: Product: syz [ 671.873014][ T10] usb 4-1: Manufacturer: syz [ 671.880692][ T10] usb 4-1: SerialNumber: syz [ 671.895779][ T10] usb 4-1: config 0 descriptor?? [ 671.912196][ T10] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 673.753991][ T10] usb 4-1: USB disconnect, device number 63 [ 673.780051][ T10] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 673.793003][ T30] audit: type=1400 audit(1770589337.936:1088): avc: denied { read } for pid=15154 comm="syz.0.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 673.848640][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2649'. [ 674.082805][T15157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.104523][T15157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.151044][T13575] Bluetooth: hci1: command 0x0406 tx timeout [ 674.302367][T15139] Set syz1 is full, maxelem 65536 reached [ 674.733817][T15170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.051166][T15178] netlink: 'syz.2.2657': attribute type 10 has an invalid length. [ 675.263563][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 675.810543][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 676.258682][T13575] Bluetooth: hci1: command 0x0406 tx timeout [ 676.380604][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.390401][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.415425][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.442198][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.480640][ T10] usb 5-1: config 0 descriptor?? [ 677.505552][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 677.545752][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 677.730246][ T10] usb 5-1: USB disconnect, device number 73 [ 679.783214][T15228] fuse: Bad value for 'group_id' [ 679.801293][T15228] fuse: Bad value for 'group_id' [ 681.695310][T13575] Bluetooth: hci3: unexpected subevent 0x0c length: 248 > 5 [ 681.800675][ T5945] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 681.919739][ T5875] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 682.004852][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.046613][ T5945] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 682.070790][ T5945] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 682.087969][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.100520][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.114744][ T5875] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 682.141832][ T5875] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 682.151470][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.221484][ T5945] usb 5-1: config 0 descriptor?? [ 682.227257][ T5875] usb 2-1: config 0 descriptor?? [ 682.716536][ T5875] usb 5-1: USB disconnect, device number 74 [ 683.142172][T15278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.277180][T15278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.433189][T15281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.847166][T15284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.475775][ T5875] usb 2-1: USB disconnect, device number 56 [ 685.354050][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.360367][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.671484][T15310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.003465][ T5875] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 686.311310][ T5875] usb 1-1: config 0 has no interfaces? [ 686.495433][ T5875] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 686.504568][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.513690][ T5875] usb 1-1: Product: syz [ 686.517928][ T5875] usb 1-1: Manufacturer: syz [ 686.535347][ T5875] usb 1-1: SerialNumber: syz [ 686.607830][ T5875] usb 1-1: config 0 descriptor?? [ 687.173494][ T5875] usb 1-1: USB disconnect, device number 59 [ 687.249949][T15331] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 687.256466][T15331] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 687.266027][T15331] vhci_hcd vhci_hcd.0: Device attached [ 687.278127][T15331] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 687.284663][T15331] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 687.292676][T15331] vhci_hcd vhci_hcd.0: Device attached [ 687.307866][T15331] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 687.314481][T15331] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 687.408067][T15331] vhci_hcd vhci_hcd.0: Device attached [ 687.433368][T15331] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 687.447695][T15331] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 687.450584][ T5945] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 687.464558][T15331] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 687.954473][T15331] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 687.961097][T15331] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 687.985326][ T5945] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 687.993281][T15331] vhci_hcd vhci_hcd.0: Device attached [ 688.004014][T15342] vhci_hcd: connection closed [ 688.004228][ T3534] vhci_hcd vhci_hcd.3: stop threads [ 688.006459][T15337] vhci_hcd: connection closed [ 688.008977][ T3534] vhci_hcd vhci_hcd.3: release socket [ 688.032123][T15332] vhci_hcd: connection reset by peer [ 688.037535][T15334] vhci_hcd: connection closed [ 688.067028][ T3534] vhci_hcd vhci_hcd.3: disconnect device [ 688.179168][ T3534] vhci_hcd vhci_hcd.3: stop threads [ 688.187098][ T3534] vhci_hcd vhci_hcd.3: release socket [ 688.193038][ T3534] vhci_hcd vhci_hcd.3: disconnect device [ 688.220914][ T3534] vhci_hcd vhci_hcd.3: stop threads [ 688.226386][ T3534] vhci_hcd vhci_hcd.3: release socket [ 688.698365][ T3534] vhci_hcd vhci_hcd.3: disconnect device [ 688.708496][ T3534] vhci_hcd vhci_hcd.3: stop threads [ 688.715553][ T3534] vhci_hcd vhci_hcd.3: release socket [ 688.721213][ T3534] vhci_hcd vhci_hcd.3: disconnect device [ 689.028425][T15357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.066462][T15357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.822378][T15388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.940708][ T5875] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 691.123630][ T5875] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 691.136165][ T5875] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 691.197794][ T5875] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 691.235306][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.263208][T15384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.313256][ T5875] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 691.571456][ T5875] usb 2-1: USB disconnect, device number 57 [ 691.639807][T15398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.620556][ T8345] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 692.772791][ T8345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.784375][ T8345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.794433][ T8345] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 692.810566][ T5875] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 692.820594][ T8345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.853612][ T8345] usb 1-1: config 0 descriptor?? [ 692.900736][ T5921] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 692.994715][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.007415][ T5875] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 693.023510][ T5875] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 693.050839][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.111384][ T5945] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 693.127944][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 693.135956][ T5921] usb 2-1: config 14 has an invalid interface number: 28 but max is 0 [ 693.144514][ T5921] usb 2-1: config 14 has no interface number 0 [ 693.151897][ T5921] usb 2-1: config 14 interface 28 has no altsetting 0 [ 693.163521][ T5921] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=fd.2e [ 693.178154][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.278973][ T5921] usb 2-1: Product: syz [ 693.279109][ T8345] hid (null): invalid report_size -1421280949 [ 693.283392][ T5921] usb 2-1: Manufacturer: syz [ 693.294851][ T5875] usb 5-1: config 0 descriptor?? [ 693.296140][ T8345] stadia 0003:18D1:9400.0009: invalid report_size -1421280949 [ 693.337877][ T8345] stadia 0003:18D1:9400.0009: item 0 4 1 7 parsing failed [ 693.370299][ T8345] stadia 0003:18D1:9400.0009: parse failed [ 693.376524][ T5921] usb 2-1: SerialNumber: syz [ 693.388851][ T8345] stadia 0003:18D1:9400.0009: probe with driver stadia failed with error -22 [ 693.575385][ T5875] usb 1-1: USB disconnect, device number 60 [ 693.592704][T15399] ALSA: mixer_oss: invalid OSS volume '' [ 693.607089][T15399] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 693.615727][T15399] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 694.315277][T15399] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 694.390811][T15399] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 694.982930][ T10] usb usb40-port1: attempt power cycle [ 695.590372][ T5921] gspca_main: spca505-2.14.0 probing 0733:0430 [ 695.600846][ T5921] gspca_spca505: reg write: error -71 [ 695.606867][ T5921] spca505 2-1:14.28: probe with driver spca505 failed with error -5 [ 695.622318][ T5921] usb 2-1: USB disconnect, device number 58 [ 695.651057][ T10] usb usb40-port1: unable to enumerate USB device [ 696.177516][ T5921] usb 5-1: USB disconnect, device number 75 [ 697.671606][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2732'. [ 697.731084][ T8345] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 697.760804][T15453] bridge3: port 1(veth7) entered blocking state [ 697.767516][T15453] bridge3: port 1(veth7) entered disabled state [ 697.775213][T15453] veth7: entered allmulticast mode [ 697.786134][T15453] veth7: entered promiscuous mode [ 697.890708][ T8345] usb 1-1: Using ep0 maxpacket: 32 [ 698.114855][ T8345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.146591][ T8345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.179541][ T8345] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 698.192854][ T8345] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 698.206032][ T8345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.218142][ T8345] usb 1-1: config 0 descriptor?? [ 698.380553][ T5921] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 698.540798][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 698.548881][ T5921] usb 2-1: config 14 has an invalid interface number: 28 but max is 0 [ 698.557295][ T5921] usb 2-1: config 14 has no interface number 0 [ 698.563712][ T5921] usb 2-1: config 14 interface 28 has no altsetting 0 [ 698.573024][ T5921] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=fd.2e [ 698.705503][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.752918][ T8345] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000A/input/input53 [ 698.853765][ T5921] usb 2-1: Product: syz [ 698.858001][ T5921] usb 2-1: Manufacturer: syz [ 698.862070][ T8345] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000A/input/input54 [ 698.870822][ T5921] usb 2-1: SerialNumber: syz [ 699.016059][ T8345] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 699.056540][T15484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2741'. [ 699.882088][ C1] kye 0003:0458:5011.000A: usb_submit_urb(ctrl) failed: -1 [ 700.661423][ T10] usb 1-1: USB disconnect, device number 61 [ 700.849928][ T5921] gspca_main: spca505-2.14.0 probing 0733:0430 [ 700.861842][ T5921] gspca_spca505: reg write: error -71 [ 700.867467][ T5921] spca505 2-1:14.28: probe with driver spca505 failed with error -5 [ 700.898387][ T5921] usb 2-1: USB disconnect, device number 59 [ 701.124688][T15511] netlink: 'syz.1.2747': attribute type 4 has an invalid length. [ 701.871632][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 702.200748][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 702.224648][ T10] usb 2-1: config 0 has no interfaces? [ 702.253512][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 702.298884][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.334247][ T10] usb 2-1: Manufacturer: syz [ 702.351035][ T10] usb 2-1: config 0 descriptor?? [ 703.215470][T13575] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 703.382786][T15533] input: syz0 as /devices/virtual/input/input55 [ 703.512726][T15535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2755'. [ 703.548194][T15537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.664098][T15543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.672847][ T5921] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 704.782077][ T10] usb 2-1: USB disconnect, device number 60 [ 704.950035][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 705.121183][ T5921] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 705.148143][ T5921] usb 5-1: config 179 has no interface number 0 [ 705.220644][ T5921] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 705.231757][ T5921] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 705.319343][ T5921] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 705.360636][ T5921] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 705.398406][ T5921] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 705.440307][ T5921] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 705.475668][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.538042][T15535] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 705.767421][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input56 [ 706.019446][T15535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.051353][T15535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.421703][ T5921] usb 5-1: USB disconnect, device number 76 [ 706.427646][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 706.427675][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 706.511861][T15569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.419410][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 707.428631][T15579] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2769'. [ 707.644338][T15586] input: syz0 as /devices/virtual/input/input57 [ 708.179503][ T30] audit: type=1400 audit(1770589372.316:1089): avc: denied { lock } for pid=15596 comm="syz.1.2774" path="socket:[61511]" dev="sockfs" ino=61511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 709.081581][T15583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.922560][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 709.935954][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 709.954247][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 709.968925][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 709.982210][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 710.329059][ T6204] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 710.349746][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 710.690535][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 710.730204][ T10] usb 1-1: config 14 has an invalid interface number: 28 but max is 0 [ 710.750510][ T10] usb 1-1: config 14 has no interface number 0 [ 710.756672][ T10] usb 1-1: config 14 interface 28 has no altsetting 0 [ 710.860886][ T10] usb 1-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=fd.2e [ 710.869912][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.879390][ T10] usb 1-1: Product: syz [ 710.885752][ T10] usb 1-1: Manufacturer: syz [ 710.890353][ T10] usb 1-1: SerialNumber: syz [ 712.076453][ T5817] Bluetooth: hci5: command tx timeout [ 712.334349][T15622] chnl_net:caif_netlink_parms(): no params data found [ 712.732228][T15622] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.750982][T15622] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.761254][T15648] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2787'. [ 712.770288][T15648] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2787'. [ 712.800826][T15622] bridge_slave_0: entered allmulticast mode [ 712.817041][T15622] bridge_slave_0: entered promiscuous mode [ 712.836382][T15622] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.864506][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.890106][T15622] bridge_slave_1: entered allmulticast mode [ 713.259093][T15622] bridge_slave_1: entered promiscuous mode [ 713.402493][T15622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.422310][T15622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.497785][ T10] gspca_main: spca505-2.14.0 probing 0733:0430 [ 713.531237][ T10] gspca_spca505: reg write: error -71 [ 713.546925][ T10] spca505 1-1:14.28: probe with driver spca505 failed with error -5 [ 713.566892][T15622] team0: Port device team_slave_0 added [ 713.593196][T15622] team0: Port device team_slave_1 added [ 713.600755][ T10] usb 1-1: USB disconnect, device number 62 [ 713.647373][T15622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.655242][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.736097][T15622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.754497][T15622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.764704][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.791276][T15622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.123326][T15622] hsr_slave_0: entered promiscuous mode [ 714.135735][T15622] hsr_slave_1: entered promiscuous mode [ 714.142430][T15622] debugfs: 'hsr0' already exists in 'hsr' [ 714.150775][ T5817] Bluetooth: hci5: command tx timeout [ 714.151239][T15622] Cannot create hsr debugfs directory [ 714.252874][ T5921] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 714.571758][T15675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.645082][ T5921] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 714.669284][ T5921] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 714.699229][ T5921] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 714.708976][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.730137][T15670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 714.742894][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 715.428248][ T10] usb 2-1: USB disconnect, device number 61 [ 715.849690][T15622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.875926][T15622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.899714][T15622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.915283][T15622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 716.231153][ T5817] Bluetooth: hci5: command tx timeout [ 716.620041][T15622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.751786][T15622] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.772132][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.779205][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.811763][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.818923][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.513432][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 717.802056][T15709] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2801'. [ 717.811271][T15709] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2801'. [ 717.820830][T15709] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2801'. [ 717.958799][ T5817] Bluetooth: hci4: unexpected subevent 0x0e length: 248 > 15 [ 717.967901][ T5817] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 718.350618][ T5817] Bluetooth: hci5: command tx timeout [ 718.458580][T15726] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 718.484857][T15726] CIFS: Unable to determine destination address [ 718.810345][T15725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.519422][T15622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.848939][T15622] veth0_vlan: entered promiscuous mode [ 719.857632][T15622] veth1_vlan: entered promiscuous mode [ 719.901307][ T5945] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 719.928399][T15622] veth0_macvtap: entered promiscuous mode [ 719.947622][T15622] veth1_macvtap: entered promiscuous mode [ 720.032542][T15622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.058282][T15622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.088174][T15352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.102752][T15352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.107402][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.142853][ T5945] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 720.251292][ T5945] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 720.271952][T15352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.275483][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.280954][T15352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.347385][ T5945] usb 5-1: config 0 descriptor?? [ 720.509218][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.518303][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.648090][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.663426][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.709479][ T30] audit: type=1400 audit(1770589384.846:1090): avc: denied { mounton } for pid=15622 comm="syz-executor" path="/root/syzkaller.7S1S7H/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 720.772850][ T30] audit: type=1400 audit(1770589384.876:1091): avc: denied { mounton } for pid=15622 comm="syz-executor" path="/root/syzkaller.7S1S7H/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 720.806196][ T30] audit: type=1400 audit(1770589384.876:1092): avc: denied { mounton } for pid=15622 comm="syz-executor" path="/root/syzkaller.7S1S7H/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=62463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 720.868574][ T30] audit: type=1400 audit(1770589384.946:1093): avc: denied { mounton } for pid=15622 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 721.192996][ T5875] usb 5-1: USB disconnect, device number 77 [ 721.475055][T15757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.674918][T13575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 721.686738][T13575] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 721.719666][T13575] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 721.740173][T13575] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 721.747800][T13575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 722.402899][T15777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.996619][T15792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.210356][ T5875] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 723.255975][T15764] chnl_net:caif_netlink_parms(): no params data found [ 723.490533][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 723.507273][ T5875] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 723.526667][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.555350][ T5875] usb 1-1: config 0 descriptor?? [ 723.562227][T15764] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.579693][T15764] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.591107][T15764] bridge_slave_0: entered allmulticast mode [ 723.598598][T15764] bridge_slave_0: entered promiscuous mode [ 723.827623][ T5875] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 723.830727][T13575] Bluetooth: hci3: command tx timeout [ 723.848979][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 723.869598][ T5875] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 723.939372][ T5875] usb 1-1: media controller created [ 723.969270][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.090815][ T5875] DVB: Unable to find symbol dib7000p_attach() [ 724.107952][ T5875] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 724.125594][T15764] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.135824][T15764] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.156782][T15764] bridge_slave_1: entered allmulticast mode [ 724.184916][T15764] bridge_slave_1: entered promiscuous mode [ 724.220578][ T5875] rc_core: IR keymap rc-dib0700-rc5 not found [ 724.226790][ T5875] Registered IR keymap rc-empty [ 724.237084][ T5875] dvb-usb: could not initialize remote control. [ 724.251038][ T5875] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 724.266359][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.318760][ T5875] usb 1-1: USB disconnect, device number 63 [ 724.373376][ T5875] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 724.532517][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.831415][T15764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.046836][T15764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.135638][T15764] team0: Port device team_slave_0 added [ 725.262983][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.290027][T15764] team0: Port device team_slave_1 added [ 725.301534][T15823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2830'. [ 725.453436][T15764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.516830][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.801130][T15764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.881727][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.896359][T15836] netlink: 'syz.0.2833': attribute type 10 has an invalid length. [ 725.904805][T15831] tipc: Enabling of bearer rejected, already enabled [ 725.924436][T13575] Bluetooth: hci3: command tx timeout [ 725.933137][T15764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.946411][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.015719][T15764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.011834][T15764] hsr_slave_0: entered promiscuous mode [ 727.036356][T15764] hsr_slave_1: entered promiscuous mode [ 727.073073][T15764] debugfs: 'hsr0' already exists in 'hsr' [ 727.078836][T15764] Cannot create hsr debugfs directory [ 727.229700][ T13] bridge_slave_1: left allmulticast mode [ 727.247901][ T13] bridge_slave_1: left promiscuous mode [ 727.266806][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.304946][ T13] bridge_slave_0: left allmulticast mode [ 727.322296][ T13] bridge_slave_0: left promiscuous mode [ 727.340091][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.040952][T13575] Bluetooth: hci3: command tx timeout [ 728.089653][T15881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.454830][ T13] dvmrp0 (unregistering): left allmulticast mode [ 728.536637][ T13] team0: Port device geneve0 removed [ 728.739545][T15890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.023383][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.033582][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.043793][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 729.054107][ T13] bond0 (unregistering): Released all slaves [ 730.178156][T13575] Bluetooth: hci3: command tx timeout [ 731.683899][ T13] tipc: Disabling bearer [ 731.733158][ T13] tipc: Left network mode [ 732.022568][ T30] audit: type=1400 audit(1770589396.166:1094): avc: denied { read } for pid=15948 comm="syz.3.2855" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 732.073517][ T30] audit: type=1400 audit(1770589396.186:1095): avc: denied { mounton } for pid=15948 comm="syz.3.2855" path="/10/file1/file0" dev="autofs" ino=63453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 732.105941][ T30] audit: type=1400 audit(1770589396.246:1096): avc: denied { unmount } for pid=15622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 732.305216][T15953] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 733.355461][T15764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 733.530775][T15764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 733.549234][T15764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 734.337325][ T13] hsr_slave_0: left promiscuous mode [ 734.416094][ T13] hsr_slave_1: left promiscuous mode [ 734.586205][ T13] veth1_macvtap: left promiscuous mode [ 734.594004][ T13] veth0_macvtap: left promiscuous mode [ 734.611310][ T13] veth0_vlan: left promiscuous mode [ 735.294902][ T13] pim6reg (unregistering): left allmulticast mode [ 735.817995][T15997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2865'. [ 736.648960][ T13] team0 (unregistering): Port device team_slave_1 removed [ 736.739824][ T13] team0 (unregistering): Port device team_slave_0 removed [ 737.603571][T15764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 737.932560][T15764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.021460][ T13] IPVS: stop unused estimator thread 0... [ 738.089084][T15764] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.105275][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.112477][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.169855][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.177042][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.215527][T15764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 738.226661][T15764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.525911][T15764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.595931][T15764] veth0_vlan: entered promiscuous mode [ 738.673291][T15764] veth1_vlan: entered promiscuous mode [ 738.809959][T15764] veth0_macvtap: entered promiscuous mode [ 738.843279][T15764] veth1_macvtap: entered promiscuous mode [ 738.929351][T15764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.953441][T15764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.002307][ T1143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.101555][ T1143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.151169][ T1143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.174809][ T1143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.215131][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.261139][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.280590][ T5921] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 739.292040][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.301193][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.976530][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 740.042055][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 740.051576][ T5921] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 740.076411][ T5921] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 740.151633][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.249038][ T5921] usb 5-1: config 1 has no interface number 1 [ 740.264289][ T5921] usb 5-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 740.294511][ T5921] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.327177][ T5921] usb 5-1: config 1 interface 4 has no altsetting 0 [ 740.372362][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 740.407446][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.450332][ T5921] usb 5-1: Product: syz [ 740.491462][ T5921] usb 5-1: Manufacturer: syz [ 740.520210][ T5921] usb 5-1: SerialNumber: syz [ 740.872385][T16094] tmpfs: Unknown parameter '' [ 742.249972][ T5921] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 742.286337][ T5921] usb 5-1: USB disconnect, device number 78 [ 742.337822][T13892] udevd[13892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.081695][T15352] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 743.746445][ T30] audit: type=1400 audit(1770589407.646:1097): avc: denied { write } for pid=16119 comm="syz.0.2888" path="socket:[66366]" dev="sockfs" ino=66366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 744.779596][T13575] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 747.008074][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.014573][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.984532][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 748.042791][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 748.050805][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 748.061025][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 748.075933][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 748.240927][T13575] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 748.458840][T16174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.789728][T16161] chnl_net:caif_netlink_parms(): no params data found [ 748.798673][T13575] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 748.808813][T13575] Bluetooth: hci1: Injecting HCI hardware error event [ 748.819050][ T5817] Bluetooth: hci1: hardware error 0x00 [ 748.837370][T16180] input: syz0 as /devices/virtual/input/input59 [ 748.939160][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.971624][T16161] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.978829][T16161] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.988128][T16161] bridge_slave_0: entered allmulticast mode [ 748.995565][T16161] bridge_slave_0: entered promiscuous mode [ 749.013021][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.027734][T16161] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.036187][T16161] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.043983][T16161] bridge_slave_1: entered allmulticast mode [ 749.052788][T16161] bridge_slave_1: entered promiscuous mode [ 749.098119][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.205301][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 749.217695][T16161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.233274][T16161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.264649][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.333286][T16161] team0: Port device team_slave_0 added [ 749.398599][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 749.404710][T16161] team0: Port device team_slave_1 added [ 749.430882][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.453332][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.465317][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.475273][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.478686][T16161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.483431][ T10] usb 1-1: Product: syz [ 749.494971][ T10] usb 1-1: Manufacturer: syz [ 749.499921][ T10] usb 1-1: SerialNumber: syz [ 749.519930][T16161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.575184][T16161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.609803][T16161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.627031][T16161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.679069][T16161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.723011][ T10] usb 1-1: 0:2 : does not exist [ 749.734928][ T10] usb 1-1: unit 9 not found! [ 749.766249][ T10] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 749.786938][ T10] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 749.815913][ T10] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 749.835965][ T10] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 749.878262][ T10] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 749.882157][T16161] hsr_slave_0: entered promiscuous mode [ 749.902079][T16161] hsr_slave_1: entered promiscuous mode [ 749.920006][ T10] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 750.012703][ T10] usb 1-1: USB disconnect, device number 64 [ 750.164813][T13575] Bluetooth: hci2: command tx timeout [ 750.230815][ T5890] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 750.268596][ T12] bridge_slave_1: left allmulticast mode [ 750.291120][ T12] bridge_slave_1: left promiscuous mode [ 750.296899][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.336529][ T12] bridge_slave_0: left allmulticast mode [ 750.350658][ T12] bridge_slave_0: left promiscuous mode [ 750.406918][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.464270][ T5890] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 750.476426][ T5890] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 750.496541][ T5890] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 750.519224][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.544247][T16197] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 750.554967][ T5890] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 751.200475][ T5817] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 751.274884][ T5890] usb 3-1: USB disconnect, device number 35 [ 751.338787][T14975] udevd[14975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.628436][ T5817] Bluetooth: hci0: unexpected event for opcode 0x0029 [ 752.054390][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2914'. [ 752.257459][ T5817] Bluetooth: hci2: command tx timeout [ 752.572771][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.610394][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.652029][ T12] bond0 (unregistering): Released all slaves [ 753.041314][ T30] audit: type=1400 audit(1770589417.186:1098): avc: denied { unmount } for pid=15764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 753.990902][ T5921] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 754.213781][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.225087][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.260598][T16261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 754.281664][ T5921] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 754.305156][T16261] block device autoloading is deprecated and will be removed. [ 754.312758][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.320791][ T5817] Bluetooth: hci2: command tx timeout [ 754.351508][ T5921] usb 3-1: config 0 descriptor?? [ 754.447517][ T5817] Bluetooth: hci0: unexpected event for opcode 0x0029 [ 754.583206][ T12] hsr_slave_0: left promiscuous mode [ 754.797031][ T5921] hid (null): invalid report_size -1421280949 [ 754.862649][ T5921] stadia 0003:18D1:9400.000B: invalid report_size -1421280949 [ 754.886054][ T12] hsr_slave_1: left promiscuous mode [ 754.892146][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.892268][ T5921] stadia 0003:18D1:9400.000B: item 0 4 1 7 parsing failed [ 754.899687][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.966443][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.006043][T16248] ALSA: mixer_oss: invalid OSS volume '' [ 755.015503][T16248] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 755.036796][ T5921] stadia 0003:18D1:9400.000B: parse failed [ 755.050381][T16248] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 756.016458][T16248] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 756.094176][T16248] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 756.286423][ T5945] usb 1-1: USB disconnect, device number 65 [ 756.470791][ T5817] Bluetooth: hci2: command tx timeout [ 757.025451][T16297] program syz.1.2929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.089917][ T30] audit: type=1400 audit(1770589421.206:1099): avc: denied { ioctl } for pid=16294 comm="syz.1.2929" path="socket:[67843]" dev="sockfs" ino=67843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 757.569611][T16298] x_tables: duplicate underflow at hook 2 [ 758.944657][T16308] md: could not open device unknown-block(0,0). [ 758.956065][T16308] md: md_import_device returned -6 [ 759.832569][T16325] gfs2: error -5 reading superblock [ 760.003075][ T12] team0 (unregistering): Port device team_slave_1 removed [ 760.285260][ T12] team0 (unregistering): Port device team_slave_0 removed [ 760.370868][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 760.533018][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.552118][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.568660][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 760.600840][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.620579][ T5921] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 760.638457][ T9] usb 3-1: config 0 descriptor?? [ 760.783158][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.795370][ T5921] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 760.805536][ T5921] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 760.815120][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.845602][ T5921] usb 5-1: config 0 descriptor?? [ 761.078291][ T9] hid (null): invalid report_size -1421280949 [ 761.093352][ T9] stadia 0003:18D1:9400.000C: invalid report_size -1421280949 [ 761.116133][ T9] stadia 0003:18D1:9400.000C: item 0 4 1 7 parsing failed [ 761.132348][ T9] stadia 0003:18D1:9400.000C: parse failed [ 761.138356][ T9] stadia 0003:18D1:9400.000C: probe with driver stadia failed with error -22 [ 761.254439][ T5921] usb 5-1: USB disconnect, device number 79 [ 761.282084][ T5945] usb 3-1: USB disconnect, device number 37 [ 761.294561][T16324] ALSA: mixer_oss: invalid OSS volume '' [ 761.300199][T16324] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 761.320582][T16324] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 761.441002][T16324] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 761.449327][T16324] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 763.265797][T16335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 763.293529][T16161] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 763.372223][T16161] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 763.525652][T16161] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 763.611773][T16367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2947'. [ 763.938685][T16161] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 764.201007][T16161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.316293][T16161] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.383296][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.390460][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.463975][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.471129][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.514139][T16161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 765.832183][T16161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.008640][T16437] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2957'. [ 767.338838][T16161] veth0_vlan: entered promiscuous mode [ 767.355603][T16161] veth1_vlan: entered promiscuous mode [ 767.411645][ T5875] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 767.435022][T16161] veth0_macvtap: entered promiscuous mode [ 767.455223][T16161] veth1_macvtap: entered promiscuous mode [ 767.532359][T16161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.569360][T16161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.615622][ T1143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.624372][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.624400][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 767.624436][ T5875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 767.624456][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.682598][ T5875] usb 3-1: config 0 descriptor?? [ 767.728778][ T1143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.778055][ T1143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.791557][ T1143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.807691][ T5875] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 768.080950][ T9] usb 3-1: USB disconnect, device number 38 [ 768.641248][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.649055][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.756210][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.779974][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.614583][ T5921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 769.925491][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 769.950156][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.968509][ T5921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.988900][ T5921] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 770.009681][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.028305][ T5921] usb 6-1: Product: syz [ 770.030046][T16493] fuse: Bad value for 'group_id' [ 770.042442][ T5921] usb 6-1: Manufacturer: syz [ 770.052544][ T5921] usb 6-1: SerialNumber: syz [ 770.066745][T16493] fuse: Bad value for 'group_id' [ 770.301893][ T5921] usb 6-1: 0:2 : does not exist [ 770.487988][ T5921] usb 6-1: unit 9 not found! [ 770.508925][ T5921] usb 6-1: USB disconnect, device number 2 [ 770.548969][T13892] udevd[13892]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.990495][ T5921] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 771.130642][ T5921] usb 3-1: device descriptor read/64, error -71 [ 771.417414][ T5921] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 771.630517][ T5921] usb 3-1: device descriptor read/64, error -71 [ 771.702797][T16519] netlink: 'syz.1.2974': attribute type 4 has an invalid length. [ 771.756735][ T5921] usb usb3-port1: attempt power cycle [ 772.070788][ T5945] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 772.110675][ T5921] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 772.740497][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 772.772848][ T5921] usb 3-1: device descriptor read/8, error -71 [ 772.798155][ T5945] usb 2-1: config 0 has no interfaces? [ 772.934742][ T5945] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 772.968088][ T5945] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 773.034065][ T5945] usb 2-1: Manufacturer: syz [ 773.042166][ T5945] usb 2-1: config 0 descriptor?? [ 773.111359][ T5921] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 774.163939][ T5921] usb 3-1: device descriptor read/8, error -71 [ 774.271699][ T5921] usb usb3-port1: unable to enumerate USB device [ 774.322420][T16544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2980'. [ 774.750530][ T5921] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 774.826131][ T6204] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 774.900508][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 774.916742][ T5921] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 774.943729][ T5921] usb 1-1: config 179 has no interface number 0 [ 774.979727][ T5921] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 775.028312][ T5921] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 775.159065][ T5921] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 775.171731][ T5921] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 775.198429][ T5921] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 775.729075][ T5921] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 775.759828][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.806542][T16544] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 776.040693][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input60 [ 776.247125][T16544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.256746][T16544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.471934][ T5921] usb 1-1: USB disconnect, device number 66 [ 776.477901][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 776.477935][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 776.578148][ T9] usb 2-1: USB disconnect, device number 62 [ 776.990499][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 777.172379][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 777.211935][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 777.242042][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 777.258418][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.303077][ T9] usb 2-1: Product: syz [ 777.314251][ T9] usb 2-1: Manufacturer: syz [ 777.324267][ T9] usb 2-1: SerialNumber: syz [ 777.340665][ T9] usb 2-1: config 0 descriptor?? [ 777.355865][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 777.380945][ T9] usb 2-1: Detected FT232R [ 777.391528][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 777.548428][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 777.555354][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.557228][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 777.586589][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.605362][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 777.621363][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.639701][ T24] usb 1-1: Product: syz [ 777.645045][ T24] usb 1-1: Manufacturer: syz [ 777.649831][ T24] usb 1-1: SerialNumber: syz [ 777.776596][ T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 777.791596][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 777.817528][ T9] usb 2-1: USB disconnect, device number 63 [ 777.833411][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 777.849581][ T9] ftdi_sio 2-1:0.0: device disconnected [ 777.861699][ T5921] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 777.883996][ T24] usb 1-1: 0:2 : does not exist [ 777.888999][ T24] usb 1-1: unit 9 not found! [ 777.908551][ T24] usb 1-1: USB disconnect, device number 67 [ 777.938438][T13892] udevd[13892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.030489][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 778.037347][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.049390][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.059387][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 778.072601][ T5921] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 778.082197][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.099054][ T5921] usb 5-1: config 0 descriptor?? [ 778.711089][ T5945] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 778.725708][ T5921] usbhid 5-1:0.0: can't add hid device: -71 [ 778.737729][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 778.773988][ T5921] usb 5-1: USB disconnect, device number 80 [ 778.800537][ T8345] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 778.920494][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 778.928015][ T5945] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 778.937534][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.952290][ T5945] usb 2-1: config 0 descriptor?? [ 779.160842][ T8345] usb 1-1: config 0 has no interfaces? [ 779.168206][ T8345] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 779.182864][ T8345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.197125][ T8345] usb 1-1: Product: syz [ 779.242715][ T5945] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 779.252468][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 779.270691][ T5921] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 779.271832][ T8345] usb 1-1: Manufacturer: syz [ 779.293609][ T8345] usb 1-1: SerialNumber: syz [ 779.294080][ T5945] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 779.328029][ T5945] usb 2-1: media controller created [ 779.340629][ T8345] usb 1-1: config 0 descriptor?? [ 779.374095][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.420783][ T5921] usb 6-1: device descriptor read/64, error -71 [ 779.690584][ T5921] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 779.817643][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'. [ 779.829153][ T5945] DVB: Unable to find symbol dib7000p_attach() [ 779.862516][T16529] usb 1-1: USB disconnect, device number 68 [ 779.876225][ T5945] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 779.931023][ T5921] usb 6-1: device descriptor read/64, error -71 [ 780.060700][ T5921] usb usb6-port1: attempt power cycle [ 780.110486][ T5945] rc_core: IR keymap rc-dib0700-rc5 not found [ 780.130707][ T5945] Registered IR keymap rc-empty [ 780.631476][ T5945] dvb-usb: could not initialize remote control. [ 780.654541][ T5945] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 780.713982][ T5945] usb 2-1: USB disconnect, device number 64 [ 780.840973][ T5921] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 780.972812][ T5921] usb 6-1: device descriptor read/8, error -71 [ 780.987713][ T5945] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 781.141475][T16630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.262792][ T5921] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 781.292182][ T5921] usb 6-1: device descriptor read/8, error -71 [ 781.413231][ T5921] usb usb6-port1: unable to enumerate USB device [ 782.118485][ T30] audit: type=1400 audit(1770589445.906:1100): avc: denied { ioctl } for pid=16643 comm="syz.1.3002" path="socket:[69647]" dev="sockfs" ino=69647 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 782.186136][ T5921] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 782.422217][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.520856][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 782.540398][ T5921] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 782.575235][T16649] syzkaller0: entered promiscuous mode [ 782.575605][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.663268][ T5921] usb 3-1: config 0 descriptor?? [ 782.666931][T16649] syzkaller0: entered allmulticast mode [ 782.703438][ T5921] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 782.757494][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 782.979415][ T5921] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 783.020681][ T5921] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 783.140953][ T5921] usb 3-1: media controller created [ 783.151903][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.179837][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 783.190546][ T5921] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 783.248357][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 783.280368][T16669] fuse: Bad value for 'rootmode' [ 783.346657][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 783.372609][ T5921] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 783.424516][ T5921] usb 3-1: USB disconnect, device number 43 [ 783.481275][ T5945] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 783.511693][ T5921] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 783.642535][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.671088][ T5945] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 783.690234][ T5945] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 783.706966][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.730073][T16680] pim6reg: entered allmulticast mode [ 783.774274][ T5945] usb 5-1: config 0 descriptor?? [ 783.839092][ T5945] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 783.886414][ T5945] dvb-usb: bulk message failed: -22 (3/0) [ 784.005935][ T5945] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 784.007143][ T5945] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 784.007168][ T5945] usb 5-1: media controller created [ 784.007801][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 784.043649][ T5945] dvb-usb: bulk message failed: -22 (6/0) [ 784.043705][ T5945] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 784.101834][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 784.138018][ T5945] dvb-usb: schedule remote query interval to 150 msecs. [ 784.138034][ T5945] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 784.149330][ T5945] usb 5-1: USB disconnect, device number 81 [ 784.348082][ T5945] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 784.907790][T16715] random: crng reseeded on system resumption [ 786.090555][T16729] x_tables: duplicate underflow at hook 2 [ 787.204155][T16750] debugfs: 'ttyS3' already exists in 'caif_serial' [ 788.118455][T16749] orangefs_mount: mount request failed with -4 [ 788.235908][T16745] orangefs_mount: mount request failed with -4 [ 788.775809][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 789.320485][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 789.338636][ T9] usb 1-1: config 0 has no interfaces? [ 789.346155][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 789.401207][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 789.410390][ T9] usb 1-1: Manufacturer: syz [ 789.420791][ T9] usb 1-1: config 0 descriptor?? [ 790.526471][T16772] pim6reg: entered allmulticast mode [ 790.754909][T16786] random: crng reseeded on system resumption [ 790.920511][ T5890] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 791.072443][ T5890] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 791.085896][ T5890] usb 6-1: config 0 has no interface number 0 [ 792.008196][ T5890] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 792.017303][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.053284][ T5890] usb 6-1: config 0 descriptor?? [ 792.060232][ T5945] usb 1-1: USB disconnect, device number 69 [ 792.061094][ T5890] usb 6-1: selecting invalid altsetting 1 [ 792.076045][ T5890] dvb_ttusb_budget: ttusb_init_controller: error [ 792.082645][ T5890] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 792.385444][ T5890] DVB: Unable to find symbol cx22700_attach() [ 792.475452][ T5890] DVB: Unable to find symbol tda10046_attach() [ 792.501457][ T5890] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 792.520640][ T5945] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 792.522059][ T5890] usb 6-1: USB disconnect, device number 7 [ 792.831249][ T5945] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 792.849900][ T5945] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 792.878747][T13575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 792.888080][T13575] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 792.896236][T13575] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 792.906800][T13575] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 792.914266][T13575] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.930606][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 792.961158][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 792.971307][ T5945] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 792.982497][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 793.010512][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 793.018135][ T5945] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 793.068648][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 793.144024][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 793.235654][ T5945] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 793.271110][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 793.292066][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 793.299625][ T5945] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 793.309042][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 793.322235][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 793.352469][ T5945] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 793.364503][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 793.379232][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 793.387227][ T5945] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 793.396566][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 793.407846][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 793.415968][ T5945] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 793.425313][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 793.436695][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 793.473609][ T5945] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 793.484726][ T5945] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 793.493679][ T5945] usb 1-1: Product: syz [ 793.498131][ T5945] usb 1-1: Manufacturer: syz [ 794.389794][ T5945] usb 1-1: SerialNumber: syz [ 794.463547][ T5945] usb 1-1: config 0 descriptor?? [ 794.503729][ T5945] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 795.130998][T13575] Bluetooth: hci5: command tx timeout [ 796.981000][ T5890] usb 1-1: USB disconnect, device number 70 [ 797.178256][ T5890] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 797.193507][T13575] Bluetooth: hci5: command tx timeout [ 797.194764][T16849] fuse: Unknown parameter 'user_i00000000000000000000' [ 797.281938][T16809] chnl_net:caif_netlink_parms(): no params data found [ 797.432671][T15352] bridge_slave_1: left allmulticast mode [ 797.438313][T15352] bridge_slave_1: left promiscuous mode [ 797.483514][T15352] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.544189][T15352] bridge_slave_0: left allmulticast mode [ 797.549851][T15352] bridge_slave_0: left promiscuous mode [ 798.028922][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 798.562738][T15352] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.055488][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3047'. [ 799.529047][ T5817] Bluetooth: hci5: command tx timeout [ 801.733370][ T5817] Bluetooth: hci5: command tx timeout [ 802.399442][T15352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.409168][T15352] bond_slave_0: left promiscuous mode [ 802.511229][T15352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.520066][T15352] bond_slave_1: left promiscuous mode [ 803.417429][T15352] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 803.425581][ T5921] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 803.454180][T15352] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 803.473427][T15352] bond0 (unregistering): Released all slaves [ 803.662351][ T5921] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 803.682128][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.695093][ T5921] usb 5-1: config 0 descriptor?? [ 803.705261][ T5921] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 803.762558][T15352] tipc: Disabling bearer [ 803.832257][T15352] tipc: Left network mode [ 803.880629][T16809] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.889523][T16809] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.897273][T16809] bridge_slave_0: entered allmulticast mode [ 803.907918][T16809] bridge_slave_0: entered promiscuous mode [ 803.921113][T16809] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.928379][T16809] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.935918][T16809] bridge_slave_1: entered allmulticast mode [ 803.952757][T16809] bridge_slave_1: entered promiscuous mode [ 804.120648][ T5921] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 804.162209][T16809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.203966][T16809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.330650][ T5921] gspca_cpia1: usb_control_msg 01, error -71 [ 804.336675][ T5921] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 804.378571][ T5921] usb 5-1: USB disconnect, device number 82 [ 804.568557][T15352] pim6reg (unregistering): left allmulticast mode [ 807.001727][T15352] team0 (unregistering): Port device team_slave_1 removed [ 807.101653][T15352] team0 (unregistering): Port device team_slave_0 removed [ 807.358215][T16809] team0: Port device team_slave_0 added [ 807.369347][T16809] team0: Port device team_slave_1 added [ 807.380516][ T5921] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 807.390700][ T5943] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 807.395869][T16809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.416516][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.450296][T16809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.471618][T16809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.479564][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.507344][T16809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.550508][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 807.556775][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 807.565020][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.574476][T16809] hsr_slave_0: entered promiscuous mode [ 807.581832][T16809] hsr_slave_1: entered promiscuous mode [ 807.588559][T16809] debugfs: 'hsr0' already exists in 'hsr' [ 807.596134][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 807.600525][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.606804][T16809] Cannot create hsr debugfs directory [ 807.625242][ T5943] usb 6-1: config 0 has no interfaces? [ 807.640174][ T5943] usb 6-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 807.649827][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.660327][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.669723][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.682333][ T5921] usb 5-1: Product: syz [ 807.700524][ T5921] usb 5-1: Manufacturer: syz [ 807.707208][ T5943] usb 6-1: config 0 descriptor?? [ 807.717427][ T5921] usb 5-1: SerialNumber: syz [ 807.997717][ T5921] usb 5-1: 0:2 : does not exist [ 808.910530][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.916838][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.166407][ T5921] usb 5-1: USB disconnect, device number 83 [ 810.216441][ T5921] usb 6-1: USB disconnect, device number 8 [ 810.290496][ T5890] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 810.495793][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.529022][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.564280][T16809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 810.571096][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 810.606182][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.615793][T16809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 810.627712][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.647581][T16809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 810.683672][T16809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 810.693459][ T5890] usb 5-1: config 0 descriptor?? [ 810.810681][T17000] binder: 16999:17000 ioctl 4018620d 0 returned -22 [ 811.551724][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 811.574126][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 811.621567][ T5890] usb 5-1: USB disconnect, device number 84 [ 811.728919][T16809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.781970][T16809] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.833175][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.840304][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.869089][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.876271][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.944244][T16809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 811.955061][T16809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.349087][T16809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.028447][T16809] veth0_vlan: entered promiscuous mode [ 813.112855][T16809] veth1_vlan: entered promiscuous mode [ 813.516217][T16809] veth0_macvtap: entered promiscuous mode [ 813.545071][T16809] veth1_macvtap: entered promiscuous mode [ 813.599815][T16809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.655190][T16809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.706058][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.740242][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.824128][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.913049][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.124874][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.155537][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.320226][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.370482][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.635728][T17058] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3074'. [ 817.159057][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 817.192101][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 817.234355][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 817.260634][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 817.271176][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 817.683122][ T30] audit: type=1400 audit(1770589481.816:1101): avc: denied { read append } for pid=17088 comm="syz.1.3080" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 817.839242][ T30] audit: type=1400 audit(1770589481.816:1102): avc: denied { open } for pid=17088 comm="syz.1.3080" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 818.135132][T17105] netlink: 'syz.2.3073': attribute type 10 has an invalid length. [ 818.284340][T17105] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 818.342180][T17084] chnl_net:caif_netlink_parms(): no params data found [ 819.361764][T13575] Bluetooth: hci4: command tx timeout [ 819.619598][ T3534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.712662][T17084] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.719819][T17084] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.727671][T17084] bridge_slave_0: entered allmulticast mode [ 819.735996][T17084] bridge_slave_0: entered promiscuous mode [ 819.744355][T17084] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.752545][T17084] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.759730][T17084] bridge_slave_1: entered allmulticast mode [ 819.775136][T17084] bridge_slave_1: entered promiscuous mode [ 819.843125][ T3534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.283902][ T3534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.352133][T17084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.389137][T17084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.440712][ T5943] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 820.750522][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 820.761245][ T3534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.827027][ T5943] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 820.845436][ T5943] usb 3-1: config 0 has no interface number 0 [ 820.906677][ T5943] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 820.935959][T17084] team0: Port device team_slave_0 added [ 820.973042][T17084] team0: Port device team_slave_1 added [ 820.994879][ T5943] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 821.004167][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.020576][ T5943] usb 3-1: Product: syz [ 821.024810][ T5943] usb 3-1: Manufacturer: syz [ 821.029397][ T5943] usb 3-1: SerialNumber: syz [ 821.077029][ T5943] usb 3-1: config 0 descriptor?? [ 821.976836][T17084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.983828][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.000578][T13575] Bluetooth: hci4: command tx timeout [ 822.011574][T17084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.106581][T17133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3084'. [ 822.130510][ T5943] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 822.175699][T17084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.183765][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.242294][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3086'. [ 822.267726][T17084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.561705][T17133] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3084'. [ 822.669124][ T5943] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 822.686229][ T5943] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 822.834252][T17084] hsr_slave_0: entered promiscuous mode [ 822.858539][T17084] hsr_slave_1: entered promiscuous mode [ 822.961167][T17084] debugfs: 'hsr0' already exists in 'hsr' [ 822.994533][T17084] Cannot create hsr debugfs directory [ 823.020639][ T3534] bridge_slave_1: left allmulticast mode [ 823.053878][ T3534] bridge_slave_1: left promiscuous mode [ 823.087025][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.124985][ T3534] bridge_slave_0: left allmulticast mode [ 823.133532][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.770528][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 823.944057][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.984789][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.001544][ T5921] usb 3-1: USB disconnect, device number 44 [ 824.032872][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 824.067130][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.084883][T13575] Bluetooth: hci4: command tx timeout [ 824.142171][ T10] usb 2-1: config 0 descriptor?? [ 824.480479][T16529] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 824.569835][ T10] hid (null): invalid report_size -1421280949 [ 824.602005][ T10] stadia 0003:18D1:9400.000D: invalid report_size -1421280949 [ 824.620649][ T10] stadia 0003:18D1:9400.000D: item 0 4 1 7 parsing failed [ 824.640014][ T10] stadia 0003:18D1:9400.000D: parse failed [ 824.648310][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.650520][ T10] stadia 0003:18D1:9400.000D: probe with driver stadia failed with error -22 [ 824.692636][T16529] usb 6-1: Using ep0 maxpacket: 32 [ 824.701695][T16529] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 824.710386][T16529] usb 6-1: config 0 has no interface number 0 [ 824.716821][T16529] usb 6-1: config 0 interface 184 has no altsetting 0 [ 824.731101][T16529] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 824.742168][T16529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.751101][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.760104][T16529] usb 6-1: Product: syz [ 824.766338][ T3534] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 824.779754][T17142] ALSA: mixer_oss: invalid OSS volume '' [ 824.787341][ T5921] usb 2-1: USB disconnect, device number 65 [ 824.799938][T17142] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 824.814234][ T3534] bond0 (unregistering): Released all slaves [ 824.820334][T16529] usb 6-1: Manufacturer: syz [ 824.820552][T17142] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 825.310052][T17142] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 825.322256][T17142] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 825.416034][ T3534] hsr_slave_0: left promiscuous mode [ 825.433547][ T3534] hsr_slave_1: left promiscuous mode [ 825.506594][T16529] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 825.522076][T16529] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 825.639309][ T3534] veth1_macvtap: left promiscuous mode [ 825.663465][ T3534] veth0_macvtap: left promiscuous mode [ 825.724206][ T3534] veth1_vlan: left promiscuous mode [ 825.730059][ T3534] veth0_vlan: left promiscuous mode [ 826.073844][ T3534] pim6reg (unregistering): left allmulticast mode [ 826.157103][T13575] Bluetooth: hci4: command tx timeout [ 826.412931][T16529] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 827.254923][T17196] orangefs_mount: mount request failed with -4 [ 827.255438][T16529] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 827.271192][T16529] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 827.280997][T16529] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 827.454558][ T9] usb 6-1: USB disconnect, device number 9 [ 827.566905][T17203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3097'. [ 827.756352][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 827.795970][T17207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.805594][T17207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.831786][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 827.983643][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 828.291853][ T5943] infiniband syz0: ib_query_port failed (-19) [ 829.240288][ T3534] IPVS: stop unused estimator thread 0... [ 829.343740][T17229] netlink: 'syz.1.3102': attribute type 4 has an invalid length. [ 830.300518][T16529] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 830.452219][T16529] usb 2-1: Using ep0 maxpacket: 16 [ 830.459463][T16529] usb 2-1: config 0 has no interfaces? [ 830.466413][T16529] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 830.475898][T16529] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 830.500728][T16529] usb 2-1: Manufacturer: syz [ 830.506592][T16529] usb 2-1: config 0 descriptor?? [ 831.245978][T17084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 831.280017][T17084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 831.323080][T17084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 831.435748][T17084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 831.681210][T17084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.837862][T17084] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.339512][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.346618][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.354058][T16529] usb 2-1: USB disconnect, device number 66 [ 832.373717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.380869][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.630591][ T5921] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 833.950530][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 833.973122][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.002994][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.034512][T17317] random: crng reseeded on system resumption [ 834.044350][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 834.056498][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.096380][ T5921] usb 2-1: Product: syz [ 834.129722][ T30] audit: type=1400 audit(1770589498.266:1103): avc: denied { create } for pid=17316 comm="syz.2.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 834.154780][ T5921] usb 2-1: Manufacturer: syz [ 834.181522][ T5921] usb 2-1: SerialNumber: syz [ 834.439502][ T5921] usb 2-1: 0:2 : does not exist [ 834.504726][ T5921] usb 2-1: unit 9 not found! [ 834.749602][ T5921] usb 2-1: USB disconnect, device number 67 [ 835.178080][T13892] udevd[13892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.581492][T17084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.658760][T17084] veth0_vlan: entered promiscuous mode [ 835.678650][T17084] veth1_vlan: entered promiscuous mode [ 836.289775][T17084] veth0_macvtap: entered promiscuous mode [ 836.306243][T17084] veth1_macvtap: entered promiscuous mode [ 836.408665][T17084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.441223][T17343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3119'. [ 836.443662][T17084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.505902][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.592025][ T30] audit: type=1400 audit(1770589500.736:1104): avc: denied { unmount } for pid=16809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 836.612531][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.661089][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.707602][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.947705][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.993074][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.091395][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.103228][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.528023][T17389] fuse: Bad value for 'fd' [ 838.840997][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 839.000969][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 839.046839][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 839.057983][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.092098][ T5890] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 839.112610][ T9] usb 1-1: config 0 descriptor?? [ 839.300500][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 839.313373][ T5890] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 839.322632][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.332127][ T5890] usb 5-1: Product: syz [ 839.344661][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 839.353797][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 839.377385][ T5890] usb 5-1: Manufacturer: syz [ 839.384587][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 839.395055][ T5890] usb 5-1: SerialNumber: syz [ 839.403187][ T9] usb 1-1: media controller created [ 839.418190][ T5890] usb 5-1: config 0 descriptor?? [ 839.450036][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.624091][ T9] DVB: Unable to find symbol dib7000p_attach() [ 839.630658][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 839.695655][ T5890] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 085 [ 839.840664][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 839.914031][ T9] Registered IR keymap rc-empty [ 839.921096][ T9] dvb-usb: could not initialize remote control. [ 839.935596][T17395] ------------[ cut here ]------------ [ 839.941291][T17395] usb 1-1: BOGUS control dir, pipe 80004780 doesn't match bRequestType c0 [ 839.949778][T17395] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.4.3126/17395 [ 839.960307][T17395] Modules linked in: [ 839.964578][T17395] CPU: 0 UID: 0 PID: 17395 Comm: syz.4.3126 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.975581][T17395] Tainted: [L]=SOFTLOCKUP [ 839.979882][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 839.990063][T17395] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 839.995880][T17395] Code: d2 74 5d 48 89 54 24 40 e8 ef d2 c8 fa 4c 89 ef e8 e7 f8 df fe 48 89 c6 48 8d 3d cd ad 85 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 c3 d2 c8 fa 89 ee bf ff 00 00 00 [ 840.015604][T17395] RSP: 0018:ffffc90003fbf970 EFLAGS: 00010283 [ 840.021675][T17395] RAX: ffffffff8c5f4d00 RBX: ffff8880333f0a00 RCX: 0000000080004780 [ 840.029620][T17395] RDX: ffff8881426c37e0 RSI: ffffffff8c5f4d00 RDI: ffffffff90c3da30 [ 840.037754][T17395] RBP: ffff888059ddc058 R08: 00000000000000c0 R09: 0000000000000000 [ 840.045862][T17395] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029f36720 [ 840.053825][T17395] R13: ffff888059ddc0b0 R14: 0000000080004780 R15: 00000000000000c0 [ 840.061959][T17395] FS: 00007ff1c0aef6c0(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 840.071166][T17395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.077728][T17395] CR2: 0000001b2fc06ff8 CR3: 0000000047b79000 CR4: 00000000003526f0 [ 840.085713][T17395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 840.093682][T17395] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 840.101738][T17395] Call Trace: [ 840.104991][T17395] [ 840.107899][T17395] ? __init_swait_queue_head+0xca/0x150 [ 840.113443][T17395] usb_start_wait_urb+0x106/0x4c0 [ 840.118441][T17395] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 840.123993][T17395] ? __asan_memset+0x23/0x50 [ 840.128564][T17395] usb_control_msg+0x326/0x4a0 [ 840.133336][T17395] ? __pfx_usb_control_msg+0x10/0x10 [ 840.138599][T17395] dib0700_ctrl_rd+0x1b5/0x320 [ 840.143362][T17395] dib0700_i2c_xfer+0x460/0xd90 [ 840.148191][T17395] __i2c_transfer+0x5e1/0x1610 [ 840.153074][T17395] ? __pfx___i2c_transfer+0x10/0x10 [ 840.158396][T17395] ? rt_mutex_slowtrylock+0x93/0x100 [ 840.163837][T17395] i2c_transfer+0x15f/0x380 [ 840.168322][T17395] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 840.173278][T17395] i2cdev_ioctl+0x19d/0x830 [ 840.177762][T17395] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 840.182780][T17395] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 840.187779][T17395] __x64_sys_ioctl+0x18e/0x210 [ 840.192541][T17395] do_syscall_64+0xc9/0xf80 [ 840.197020][T17395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.202908][T17395] RIP: 0033:0x7ff1bfb9aeb9 [ 840.207305][T17395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.226921][T17395] RSP: 002b:00007ff1c0aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.235694][T17395] RAX: ffffffffffffffda RBX: 00007ff1bfe15fa0 RCX: 00007ff1bfb9aeb9 [ 840.243684][T17395] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000004 [ 840.251726][T17395] RBP: 00007ff1bfc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 840.259852][T17395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.267974][T17395] R13: 00007ff1bfe16038 R14: 00007ff1bfe15fa0 R15: 00007ffd319ed6b8 [ 840.275966][T17395] [ 840.278969][T17395] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 840.286219][T17395] CPU: 0 UID: 0 PID: 17395 Comm: syz.4.3126 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.297120][T17395] Tainted: [L]=SOFTLOCKUP [ 840.301414][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 840.311439][T17395] Call Trace: [ 840.314689][T17395] [ 840.317602][T17395] dump_stack_lvl+0x100/0x190 [ 840.322255][T17395] vpanic+0x20d/0x630 [ 840.326208][T17395] panic+0xd1/0xd1 [ 840.329902][T17395] ? __pfx_panic+0x10/0x10 [ 840.334293][T17395] check_panic_on_warn.cold+0x19/0x34 [ 840.339636][T17395] ? usb_submit_urb+0x1573/0x1910 [ 840.344629][T17395] __warn.cold+0x191/0x2f8 [ 840.349017][T17395] __report_bug+0x296/0x3d0 [ 840.353489][T17395] ? usb_submit_urb+0x1573/0x1910 [ 840.358484][T17395] ? __pfx___report_bug+0x10/0x10 [ 840.363483][T17395] ? __pfx_stack_trace_save+0x10/0x10 [ 840.368834][T17395] ? kasan_save_stack+0x3f/0x50 [ 840.373657][T17395] ? kasan_save_stack+0x30/0x50 [ 840.378478][T17395] ? kasan_save_track+0x14/0x30 [ 840.383298][T17395] ? __kasan_kmalloc+0xaa/0xb0 [ 840.388037][T17395] report_bug_entry+0xe1/0x290 [ 840.392781][T17395] ? usb_submit_urb+0x157e/0x1910 [ 840.397775][T17395] handle_bug+0x1c9/0x2a0 [ 840.402096][T17395] exc_invalid_op+0x17/0x50 [ 840.406573][T17395] asm_exc_invalid_op+0x1a/0x20 [ 840.411395][T17395] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 840.416999][T17395] Code: d2 74 5d 48 89 54 24 40 e8 ef d2 c8 fa 4c 89 ef e8 e7 f8 df fe 48 89 c6 48 8d 3d cd ad 85 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 c3 d2 c8 fa 89 ee bf ff 00 00 00 [ 840.436591][T17395] RSP: 0018:ffffc90003fbf970 EFLAGS: 00010283 [ 840.442629][T17395] RAX: ffffffff8c5f4d00 RBX: ffff8880333f0a00 RCX: 0000000080004780 [ 840.450572][T17395] RDX: ffff8881426c37e0 RSI: ffffffff8c5f4d00 RDI: ffffffff90c3da30 [ 840.458516][T17395] RBP: ffff888059ddc058 R08: 00000000000000c0 R09: 0000000000000000 [ 840.466457][T17395] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029f36720 [ 840.474402][T17395] R13: ffff888059ddc0b0 R14: 0000000080004780 R15: 00000000000000c0 [ 840.482355][T17395] ? __init_swait_queue_head+0xca/0x150 [ 840.487895][T17395] usb_start_wait_urb+0x106/0x4c0 [ 840.492894][T17395] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 840.498416][T17395] ? __asan_memset+0x23/0x50 [ 840.502981][T17395] usb_control_msg+0x326/0x4a0 [ 840.507729][T17395] ? __pfx_usb_control_msg+0x10/0x10 [ 840.512989][T17395] dib0700_ctrl_rd+0x1b5/0x320 [ 840.517744][T17395] dib0700_i2c_xfer+0x460/0xd90 [ 840.522570][T17395] __i2c_transfer+0x5e1/0x1610 [ 840.527312][T17395] ? __pfx___i2c_transfer+0x10/0x10 [ 840.532484][T17395] ? rt_mutex_slowtrylock+0x93/0x100 [ 840.537747][T17395] i2c_transfer+0x15f/0x380 [ 840.542234][T17395] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 840.547149][T17395] i2cdev_ioctl+0x19d/0x830 [ 840.551626][T17395] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 840.556635][T17395] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 840.561658][T17395] __x64_sys_ioctl+0x18e/0x210 [ 840.566404][T17395] do_syscall_64+0xc9/0xf80 [ 840.570900][T17395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.576768][T17395] RIP: 0033:0x7ff1bfb9aeb9 [ 840.581168][T17395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.600761][T17395] RSP: 002b:00007ff1c0aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.609146][T17395] RAX: ffffffffffffffda RBX: 00007ff1bfe15fa0 RCX: 00007ff1bfb9aeb9 [ 840.617089][T17395] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000004 [ 840.625032][T17395] RBP: 00007ff1bfc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 840.632975][T17395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.640931][T17395] R13: 00007ff1bfe16038 R14: 00007ff1bfe15fa0 R15: 00007ffd319ed6b8 [ 840.648886][T17395] [ 840.652139][T17395] Kernel Offset: disabled [ 840.656437][T17395] Rebooting in 86400 seconds..