last executing test programs: 9m2.688274807s ago: executing program 1 (id=50): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 8m56.294495475s ago: executing program 1 (id=64): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[0xffff, 0x5]}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x4c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000003c0)={0x0, 0x40000000, 0x800, 0x200, 0x0, [], [0xffff, 0xd372, 0x3ff, 0x2], [0x3, 0x0, 0x5, 0x2], [0x0, 0x8, 0x6, 0x479]}) 8m51.327320763s ago: executing program 1 (id=73): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103000000000054e63eedb67564"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) 8m45.138311193s ago: executing program 1 (id=83): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000140)=@userptr={0x9, 0xa, 0x4, 0x40, 0x3, {0x77359400}, {0x0, 0x2, 0xcb, 0x7, 0x5, 0x1, "902e5cf7"}, 0x100, 0x2, {&(0x7f00000000c0)}, 0x6}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x4090}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="4400330040000000080211000000080211000001505050505050000000881b0600000000"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 8m40.404458216s ago: executing program 1 (id=88): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = add_key(0x0, 0x0, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getrlimit(0x5, &(0x7f0000000500)) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', r3, @fallback=0x2f}, 0x94) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x13, 0x3, "8167d4f8f4297df2923824fd53573b"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8887}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={"e70e0a4c", 0x9, 0x9, 0xff, 0x1, 0xe, "7b3f4e4bb2b188a614c929244374d5", "78835a02", "0e1d2379", "f669361f", ["4258ff966837d974642a76f6", "4f500bb19fd11bc9b1219989", "588190ceafc9d6ca37a99e4f", "c625b371413e217d9c9fa3b6"]}) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe3f00}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x43, &(0x7f0000000240)=""/67, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x3f, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x68}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0xffffffffffffff77) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, 0x0, &(0x7f0000000480)=r6}, 0x20) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023892) 8m39.844166784s ago: executing program 1 (id=91): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x6, 0xffff, 0x8051c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x40000, 0x1b, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$loop(&(0x7f00000000c0), 0x10, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000140)={0x0, 0x8, "d53f0d997e7bcc47"}) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001c000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff00000000000000fcffffffffffffff0000000000000000ffffffffffffffff0000000000000000ff0f000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200bdbe02e812715b210000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8m24.72170781s ago: executing program 32 (id=91): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x6, 0xffff, 0x8051c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x40000, 0x1b, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$loop(&(0x7f00000000c0), 0x10, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000140)={0x0, 0x8, "d53f0d997e7bcc47"}) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001c000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff00000000000000fcffffffffffffff0000000000000000ffffffffffffffff0000000000000000ff0f000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200bdbe02e812715b210000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8m5.098958541s ago: executing program 0 (id=145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x80000000}) close(0x3) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x6c7, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r7}, 0x38) fsync(r3) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r8, 0x80) accept$netrom(r8, 0x0, 0x0) io_uring_setup(0x31b0, &(0x7f0000000140)={0x0, 0x4df3, 0x4, 0x3, 0x5e}) 8m3.556649486s ago: executing program 0 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834ed", 0xd6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042af", 0x19}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m2.031954182s ago: executing program 0 (id=150): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 7m59.096554496s ago: executing program 0 (id=154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x2}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2c, 0xc0, 0x5, 0x4, 0x7f, 0x5, 0xf, 0x9, 0x3, 0x41, 0x7, 0x4e, 0x5, 0x35, 0xdf, 0x7f}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x8094) 7m57.321183259s ago: executing program 0 (id=155): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[0xffff, 0x5]}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x4c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000003c0)={0x0, 0x40000000, 0x800, 0x200, 0x0, [], [0xffff, 0xd372, 0x3ff, 0x2], [0x3, 0x0, 0x5, 0x2], [0x0, 0x8, 0x6, 0x479]}) 7m55.094592582s ago: executing program 0 (id=157): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000140)=@userptr={0x9, 0xa, 0x4, 0x40, 0x3, {0x77359400}, {0x0, 0x2, 0xcb, 0x7, 0x5, 0x1, "902e5cf7"}, 0x100, 0x2, {&(0x7f00000000c0)}, 0x6}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x4090}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="4400330040000000080211000000080211000001505050505050000000881b0600000000"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 7m39.72788783s ago: executing program 33 (id=157): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000140)=@userptr={0x9, 0xa, 0x4, 0x40, 0x3, {0x77359400}, {0x0, 0x2, 0xcb, 0x7, 0x5, 0x1, "902e5cf7"}, 0x100, 0x2, {&(0x7f00000000c0)}, 0x6}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x4090}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="4400330040000000080211000000080211000001505050505050000000881b0600000000"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 10.23039702s ago: executing program 6 (id=1726): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=@gettaction={0x78, 0x32, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4e04c983}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0000}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) r2 = openat$sndseq(0xffffff9c, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x42, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) r3 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 6.519139526s ago: executing program 3 (id=1751): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="9da9b107d3", 0x5}], 0x1}}], 0x1, 0x4000001) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 6.353348163s ago: executing program 6 (id=1754): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="63a5288eeb325463e98da756382a02af2a167a7a3379cb2a15ced671a55f0937e13788669b74de5f54931ccf95dd8cd4f331aec8055d8776847fa3118a6df1d9952dec66200279746a80ab1f27640f5b5fdc870ab71bd8a921d4e535abe016228be823a68c0304a55660f96adfb7c5a304b35e12ccd7ebac6082d244a7a8acf63d9ddcf50294e371236a8241df1508004ffc6b9eec0c082bf5a4", 0x9a}, {&(0x7f00000003c0)="1a638e9c1b931562dad02382add1b654bd03527a4841e7d587f57fb0878255fae01a651b7503000db7997b3b51ebf5663e3a7829973e96ae2c97d789313400f9a1a93a4b7615fd4cf9440ca6eef8a32d89e58f80438e4eb315aaa114a96ac1c1e05b00ca2fdde6235f8be73fb5b426f8cd837ab0ec7642eb26555ee7f0389f477c0f1774d15e25a7cb87a4a983", 0x8d}, {&(0x7f0000001980)="59bc2eabc8755230f8a74c7a6390868dc23b6c75a784025bf3bec62450315c43386d71c04edcc310466ad9248132049665d9c14c1d27e38731ba19ecea43091fc314a98d83714297ffd388bc2b589a3e887893fee351e603fba78817d8d37728070bfd1a53d49d2f50591893f14bc3565fa3bd18ab17ecc5f75213b49558b6864472a0694a08e0d2485498a8234970ab3e203604166a3895883631d15b97f1f7f66cacf6e5d997a907fe8bb97d24059b86769cb635006f19d629008bd4f8404642663132c7baaa184527a602f1ecd9989621d7420c97aa8ad3c54a7bb9bc081252d1ce67", 0xe4}, {&(0x7f0000000740)="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", 0xbf6}], 0x4}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5999ca2af345f8b3d228584972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0xff1}]) 6.2319102s ago: executing program 3 (id=1756): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.103779363s ago: executing program 5 (id=1759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.047750589s ago: executing program 6 (id=1760): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x4b52, &(0x7f0000000100)={0x0, 0x89, 0x1, 0x7, 0x8, "e2d9e2202f3b325c0e5d9ee58252e4b19e600b"}) 5.928703559s ago: executing program 5 (id=1762): socket$tipc(0x1e, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c"], 0x30}, 0x1, 0x0, 0x0, 0x480d0}, 0x4c800) 5.781763476s ago: executing program 5 (id=1764): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x3, 0x80000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) 5.239008874s ago: executing program 4 (id=1767): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB], 0x48) 5.042680683s ago: executing program 4 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000300)='l', 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@arm64={0xe7, 0xc, 0x2}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0x8, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.561806003s ago: executing program 4 (id=1772): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "771a16b92ea6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001780)=""/230, 0xe6}], 0x1}, 0x9}], 0x2, 0x10023, 0x0) 4.431153679s ago: executing program 5 (id=1773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4}, 0x3, 0x800}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000480)={{0x40003, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x3, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0x7bc10d5c, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x45, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0xf4, 0x4, 0x1, 0x2, 0x2, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x7, 0x6, 0x9, 0x5, 0x639, 0x8, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x1, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 3.086027649s ago: executing program 3 (id=1778): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 2.940876861s ago: executing program 4 (id=1780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}}, 0x0) 2.832605809s ago: executing program 6 (id=1781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e0"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 2.807954296s ago: executing program 4 (id=1782): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x400000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000a000000000000000000000000004f6ffe8a7538e30f78c3676025a8afe5ef0194be7ce8c3d80c4471b8be0fbf11b3951bef7e8134af98f57e82c2ad3cdf6233aaf5252fc6aef6d407f4045cad5d05884c9bfe9faa1074f247079616cab23b2f03b1a2434043bf9c33c6a366a323244f28cbaa890b29cbac5013ce9261c75437199cf5d2b6c272221d7c963ce3f4caf943148916d730da4f2f4d60e34b3a2f48f7808b"], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e00010000000000000000000700", @ANYRES32], 0x28}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000180)={0x1}) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) 2.455355548s ago: executing program 3 (id=1784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.385393049s ago: executing program 6 (id=1785): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.164594141s ago: executing program 5 (id=1788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) 1.758138749s ago: executing program 3 (id=1789): socket$unix(0x1, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100000000090400000103000000092100000001220800"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000030000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff0200000000000000000000000000010500090029000000080004"], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90) 1.641486891s ago: executing program 5 (id=1791): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x4b52, &(0x7f0000000100)={0x0, 0x89, 0x1, 0x7, 0x8, "e2d9e2202f3b325c0e5d9ee58252e4b19e600b"}) 735.690149ms ago: executing program 2 (id=1794): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, 0x0) 613.095445ms ago: executing program 2 (id=1795): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, 0x0, 0x0) 518.375879ms ago: executing program 2 (id=1796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e0"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 394.90986ms ago: executing program 2 (id=1797): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0xa, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 282.543594ms ago: executing program 3 (id=1798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24000080) 186.352246ms ago: executing program 2 (id=1799): socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 113.081524ms ago: executing program 4 (id=1800): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 43.932ms ago: executing program 6 (id=1801): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) close_range(r2, r3, 0x0) 0s ago: executing program 2 (id=1802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="0f20c035000001000f22c0b8331c39410f23d00f21f8352000000e0f23f8c74424005cec0000c744240209000000c7442406000000000f0114240f08f32ed9f6b8010000000f01d9c4c1fc525f220f01cb0fc7bcba004000009ad4000000ed00", 0x60}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.3.374'. [ 327.704631][ T7126] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 330.115858][ T7126] kthread_run failed with err -4 [ 331.535011][ T7616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.026614][ T12] bridge_slave_1: left allmulticast mode [ 332.026645][ T12] bridge_slave_1: left promiscuous mode [ 332.026916][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.112333][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.122958][ T5861] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 332.123560][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.133172][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.141753][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.142470][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.154333][ T12] bridge_slave_0: left allmulticast mode [ 332.154359][ T12] bridge_slave_0: left promiscuous mode [ 332.154634][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.275439][ T12] bridge_slave_1: left allmulticast mode [ 332.275459][ T12] bridge_slave_1: left promiscuous mode [ 332.275603][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.304481][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.304513][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.304535][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.304575][ T5861] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.304596][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.371599][ T5861] usb 5-1: config 0 descriptor?? [ 332.411877][ T12] bridge_slave_0: left allmulticast mode [ 332.411905][ T12] bridge_slave_0: left promiscuous mode [ 332.412145][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.774096][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.811343][ T5861] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x6 [ 332.837029][ T5861] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 332.923607][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.981094][ T12] bond0 (unregistering): Released all slaves [ 333.333882][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.453806][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.783907][ T12] bond0 (unregistering): Released all slaves [ 334.429109][ T6666] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 334.443670][ T5797] Bluetooth: hci1: command tx timeout [ 334.582933][ T6666] usb 5-1: device descriptor read/64, error -32 [ 334.965950][ T6666] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 336.626414][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 336.820878][ T5797] Bluetooth: hci1: command tx timeout [ 337.096863][ T10] usb 5-1: USB disconnect, device number 5 [ 339.142855][ T5797] Bluetooth: hci1: command tx timeout [ 339.472698][ T7674] ======================================================= [ 339.472698][ T7674] WARNING: The mand mount option has been deprecated and [ 339.472698][ T7674] and is ignored by this kernel. Remove the mand [ 339.472698][ T7674] option from the mount to silence this warning. [ 339.472698][ T7674] ======================================================= [ 339.578377][ T12] hsr_slave_0: left promiscuous mode [ 339.593025][ T12] hsr_slave_1: left promiscuous mode [ 339.594009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.552895][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 340.646854][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.298626][ T7687] fuse: Unknown parameter '³fd0x0000000000000005' [ 342.034723][ T5797] Bluetooth: hci1: command tx timeout [ 342.095586][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.095620][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.095642][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.095684][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.095707][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.175605][ T10] usb 5-1: config 0 descriptor?? [ 342.228844][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 342.228956][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 342.271997][ T10] usb 5-1: USB disconnect, device number 6 [ 342.345795][ T12] hsr_slave_0: left promiscuous mode [ 343.466835][ T12] hsr_slave_1: left promiscuous mode [ 343.467778][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.520802][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.741796][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.750166][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.756576][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.765834][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.766607][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.906526][ T12] team0 (unregistering): Port device team_slave_1 removed [ 346.074137][ T12] team0 (unregistering): Port device team_slave_0 removed [ 346.887345][ T5797] Bluetooth: hci5: command tx timeout [ 349.121485][ T5797] Bluetooth: hci5: command tx timeout [ 350.713575][ T12] team0 (unregistering): Port device team_slave_1 removed [ 350.875281][ T12] team0 (unregistering): Port device team_slave_0 removed [ 351.152898][ T5797] Bluetooth: hci5: command tx timeout [ 351.698343][ T7748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.256919][ T7757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.944253][ T5797] Bluetooth: hci5: command tx timeout [ 360.189752][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 360.202836][ T5910] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 360.479267][ T5910] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 360.479296][ T5910] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 360.479315][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.479333][ T5910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 360.561573][ T5910] usb 4-1: string descriptor 0 read error: -22 [ 360.561717][ T5910] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 360.561739][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.613837][ T5910] usb 4-1: config 0 descriptor?? [ 360.617405][ T5910] hub 4-1:0.0: bad descriptor, ignoring hub [ 360.617444][ T5910] hub 4-1:0.0: probe with driver hub failed with error -5 [ 361.085258][ T5910] usb 4-1: USB disconnect, device number 9 [ 361.140639][ T7839] netlink: 'syz.4.425': attribute type 10 has an invalid length. [ 361.307498][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 361.326827][ T7842] 9p: Could not find request transport: fd0x0000000000000005 [ 361.423280][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.423460][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.423644][ T7620] bridge_slave_0: entered allmulticast mode [ 361.427822][ T7620] bridge_slave_0: entered promiscuous mode [ 361.473231][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.473370][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.473602][ T7620] bridge_slave_1: entered allmulticast mode [ 361.476773][ T7620] bridge_slave_1: entered promiscuous mode [ 361.674484][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.678642][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.679257][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.679552][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.679723][ T7705] bridge_slave_0: entered allmulticast mode [ 361.726622][ T7705] bridge_slave_0: entered promiscuous mode [ 364.992482][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.992604][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.025973][ T7705] bridge_slave_1: entered allmulticast mode [ 365.028508][ T7705] bridge_slave_1: entered promiscuous mode [ 367.446668][ T7620] team0: Port device team_slave_0 added [ 367.650928][ T7620] team0: Port device team_slave_1 added [ 369.917217][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.948278][ T7905] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 369.954919][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.296893][ T7905] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 370.676137][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.676153][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.676178][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.061452][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.061467][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.061486][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.090888][ T7705] team0: Port device team_slave_0 added [ 371.174690][ T7705] team0: Port device team_slave_1 added [ 371.705815][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.705832][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.705856][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.775913][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.775929][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.775952][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.024160][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 372.139380][ T7620] hsr_slave_0: entered promiscuous mode [ 372.149145][ T7620] hsr_slave_1: entered promiscuous mode [ 372.150071][ T7620] debugfs: 'hsr0' already exists in 'hsr' [ 372.150093][ T7620] Cannot create hsr debugfs directory [ 372.184888][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.184921][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.184943][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.184983][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.185005][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.195348][ T31] usb 5-1: config 0 descriptor?? [ 372.425057][ T7705] hsr_slave_0: entered promiscuous mode [ 372.426150][ T7705] hsr_slave_1: entered promiscuous mode [ 372.426899][ T7705] debugfs: 'hsr0' already exists in 'hsr' [ 372.426921][ T7705] Cannot create hsr debugfs directory [ 372.615013][ T31] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x6 [ 372.649644][ T31] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 375.094648][ T12] bridge_slave_1: left allmulticast mode [ 375.094669][ T12] bridge_slave_1: left promiscuous mode [ 375.097563][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.170957][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100002883 [ 375.174111][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x68b7 [ 375.180232][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9f3 [ 375.181530][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x582e [ 375.203405][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x516e [ 375.217396][ T12] bridge_slave_0: left allmulticast mode [ 375.217424][ T12] bridge_slave_0: left promiscuous mode [ 375.217677][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.244752][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000010aa [ 375.254247][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x108f [ 375.265418][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10be [ 375.265553][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 375.266642][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x69fd [ 375.280146][ T7962] kvm_intel: kvm [7961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x4183 [ 375.329766][ T12] bridge_slave_1: left allmulticast mode [ 375.329793][ T12] bridge_slave_1: left promiscuous mode [ 375.329987][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.394568][ T12] bridge_slave_0: left allmulticast mode [ 375.394600][ T12] bridge_slave_0: left promiscuous mode [ 375.394873][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.438057][ T7966] kvm_intel: kvm [7965]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x4183 [ 375.472105][ T6666] usb 5-1: USB disconnect, device number 7 [ 376.125263][ T7978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.564616][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.753712][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.912448][ T12] bond0 (unregistering): Released all slaves [ 377.923705][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.034137][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.117705][ T12] bond0 (unregistering): Released all slaves [ 380.858321][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.858418][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.284222][ T12] hsr_slave_0: left promiscuous mode [ 382.492839][ T12] hsr_slave_1: left promiscuous mode [ 382.707779][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.726783][ T8023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.730628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.842971][ T12] hsr_slave_0: left promiscuous mode [ 382.882947][ T12] hsr_slave_1: left promiscuous mode [ 382.883795][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.913601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.345689][ T12] team0 (unregistering): Port device team_slave_1 removed [ 384.432893][ T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 384.463544][ T12] team0 (unregistering): Port device team_slave_0 removed [ 384.594863][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.594891][ T9] usb 3-1: config 0 has no interface number 0 [ 384.594936][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 384.594957][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 384.594980][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 384.594991][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.600582][ T9] usb 3-1: config 0 descriptor?? [ 384.635285][ T8034] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 384.686978][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 384.857695][ T9] usb 3-1: USB disconnect, device number 12 [ 385.403464][ T12] team0 (unregistering): Port device team_slave_1 removed [ 385.503449][ T12] team0 (unregistering): Port device team_slave_0 removed [ 387.843635][ T8053] fuse: Unknown parameter '³fd0x0000000000000005' [ 389.456832][ T8067] 9p: Bad value for 'rfdno' [ 391.232310][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.246863][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.248074][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.257908][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.258650][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.601365][ T8082] kvm_pr_unimpl_wrmsr: 18 callbacks suppressed [ 391.601385][ T8082] kvm: kvm [8080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100002883 [ 391.609601][ T8082] kvm: kvm [8080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x68b7 [ 391.633503][ T8082] kvm: kvm [8080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9f3 [ 391.634266][ T8082] kvm: kvm [8080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x582e [ 391.691918][ T8082] kvm: kvm [8080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x516e [ 391.719355][ T8082] kvm: kvm [8080]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000010aa [ 391.777176][ T7705] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.956374][ T7705] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.098451][ T7705] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.322872][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 392.474724][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.474757][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.474778][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.474819][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.474841][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.536035][ T10] usb 5-1: config 0 descriptor?? [ 392.976663][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x6 [ 392.992597][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 393.006264][ T7705] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 393.021871][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 393.305113][ T5806] Bluetooth: hci0: command tx timeout [ 394.054948][ T12] bridge_slave_1: left allmulticast mode [ 394.054973][ T12] bridge_slave_1: left promiscuous mode [ 394.055185][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.496223][ T808] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 394.743691][ T808] usb 5-1: device descriptor read/64, error -32 [ 394.864452][ T12] bridge_slave_0: left allmulticast mode [ 394.864481][ T12] bridge_slave_0: left promiscuous mode [ 394.864803][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.855910][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 395.861760][ T5806] Bluetooth: hci0: command tx timeout [ 396.257062][ T808] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 396.825242][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.907572][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.944813][ T12] bond0 (unregistering): Released all slaves [ 397.085441][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 397.232814][ T808] usb 5-1: device descriptor read/64, error -71 [ 397.353524][ T5802] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 397.536503][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.536535][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.536557][ T5802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.536599][ T5802] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.536621][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.572863][ T808] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 397.663116][ T5802] usb 4-1: config 0 descriptor?? [ 397.863544][ T5806] Bluetooth: hci0: command tx timeout [ 398.186268][ T12] hsr_slave_0: left promiscuous mode [ 398.215166][ T12] hsr_slave_1: left promiscuous mode [ 398.217621][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.269597][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.944005][ T5806] Bluetooth: hci0: command tx timeout [ 402.032908][ T6666] usb 5-1: USB disconnect, device number 8 [ 402.127967][ T5802] usbhid 4-1:0.0: can't add hid device: -71 [ 402.128040][ T5802] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 402.180934][ T5802] usb 4-1: USB disconnect, device number 10 [ 403.703963][ T12] team0 (unregistering): Port device team_slave_1 removed [ 403.880972][ T12] team0 (unregistering): Port device team_slave_0 removed [ 404.185740][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.191258][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.202932][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.221907][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.234332][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.874977][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'. [ 405.875002][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'. [ 405.933802][ T8226] netlink: 'syz.2.502': attribute type 10 has an invalid length. [ 405.941778][ T8224] gretap0: entered promiscuous mode [ 406.078155][ T8224] gretap0: left promiscuous mode [ 406.353171][ T5806] Bluetooth: hci1: command tx timeout [ 406.558962][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.559083][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.559280][ T8081] bridge_slave_0: entered allmulticast mode [ 406.561930][ T8081] bridge_slave_0: entered promiscuous mode [ 406.607756][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.607936][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.608147][ T8081] bridge_slave_1: entered allmulticast mode [ 406.610712][ T8081] bridge_slave_1: entered promiscuous mode [ 406.613414][ T8233] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 408.422822][ T5806] Bluetooth: hci1: command tx timeout [ 408.616536][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.704041][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.640015][ T8081] team0: Port device team_slave_0 added [ 409.959615][ T8081] team0: Port device team_slave_1 added [ 410.506210][ T5806] Bluetooth: hci1: command tx timeout [ 411.516707][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.516724][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.516748][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.685788][ T8275] 9pnet_fd: Insufficient options for proto=fd [ 411.941629][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.941645][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.941668][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.015901][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 412.015924][ T8287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'. [ 412.069609][ T8287] syz_tun: entered promiscuous mode [ 412.124280][ T8287] syz_tun: left promiscuous mode [ 412.585030][ T5806] Bluetooth: hci1: command tx timeout [ 412.635335][ T8081] hsr_slave_0: entered promiscuous mode [ 412.636607][ T8081] hsr_slave_1: entered promiscuous mode [ 412.637504][ T8081] debugfs: 'hsr0' already exists in 'hsr' [ 412.637527][ T8081] Cannot create hsr debugfs directory [ 413.973463][ T8338] overlayfs: missing 'lowerdir' [ 414.966942][ T8210] chnl_net:caif_netlink_parms(): no params data found [ 416.104994][ T8353] netlink: 'syz.4.529': attribute type 10 has an invalid length. [ 417.434386][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 417.630177][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.630221][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.630281][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.630391][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.630445][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.041445][ T8391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.431520][ T9] usb 5-1: config 0 descriptor?? [ 419.220185][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x6 [ 419.543775][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.543900][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.544212][ T8210] bridge_slave_0: entered allmulticast mode [ 419.547312][ T8210] bridge_slave_0: entered promiscuous mode [ 419.586269][ T9] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 420.412946][ T31] usb 5-1: USB disconnect, device number 9 [ 420.449158][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.449288][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.449517][ T8210] bridge_slave_1: entered allmulticast mode [ 420.508389][ T8210] bridge_slave_1: entered promiscuous mode [ 420.510296][ T12] bridge_slave_1: left allmulticast mode [ 420.510313][ T12] bridge_slave_1: left promiscuous mode [ 420.510457][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.627050][ T12] bridge_slave_0: left allmulticast mode [ 420.627070][ T12] bridge_slave_0: left promiscuous mode [ 420.627218][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.402126][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.353815][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.463559][ T12] bond0 (unregistering): Released all slaves [ 427.648380][ T8210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.724685][ T8210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.973128][ T12] hsr_slave_0: left promiscuous mode [ 428.014782][ T12] hsr_slave_1: left promiscuous mode [ 428.015722][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.063806][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.976006][ T12] team0 (unregistering): Port device team_slave_1 removed [ 431.134287][ T12] team0 (unregistering): Port device team_slave_0 removed [ 432.196366][ T8517] netlink: 68 bytes leftover after parsing attributes in process `syz.2.565'. [ 432.250378][ T8518] netlink: 'syz.2.565': attribute type 10 has an invalid length. [ 432.359661][ T8210] team0: Port device team_slave_0 added [ 432.365023][ T8081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.389833][ T8210] team0: Port device team_slave_1 added [ 432.421303][ T8081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.520040][ T8081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 432.683045][ T8081] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 432.757803][ T8210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.757820][ T8210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.757842][ T8210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.830424][ T8210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.830440][ T8210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.830465][ T8210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.082682][ T8210] hsr_slave_0: entered promiscuous mode [ 433.087116][ T8210] hsr_slave_1: entered promiscuous mode [ 433.088044][ T8210] debugfs: 'hsr0' already exists in 'hsr' [ 433.088068][ T8210] Cannot create hsr debugfs directory [ 434.661540][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 434.661573][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 434.697376][ T8559] syz_tun: entered promiscuous mode [ 434.722979][ T8559] syz_tun: left promiscuous mode [ 437.705493][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.777969][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.382879][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 438.389018][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.400839][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.547949][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.548087][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.307128][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.307158][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.307179][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.307232][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.307254][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.337360][ T10] usb 3-1: config 0 descriptor?? [ 439.897172][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x6 [ 439.924341][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 441.227637][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.227703][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.299431][ T8636] binder_alloc: 8634: binder_alloc_buf, no vma [ 441.841483][ T8210] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 441.874579][ T8210] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 442.032240][ T5802] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 442.064579][ T8210] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.100704][ T8210] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 442.162886][ T5802] usb 3-1: device descriptor read/64, error -32 [ 442.212642][ T8081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.243909][ T8657] 9p: Bad value for 'rfdno' [ 442.412875][ T5802] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 442.542818][ T5802] usb 3-1: device descriptor read/64, error -32 [ 442.770468][ T8210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.786316][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80d [ 442.791729][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x22 [ 442.792907][ T5802] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 442.813955][ T5802] usb 3-1: device descriptor read/8, error -32 [ 442.846591][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x91b [ 442.850621][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x188 [ 442.851125][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x995 [ 442.852490][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x9bb [ 442.890209][ T8210] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.081073][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.101457][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.138816][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x440 [ 443.164048][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.164177][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.165001][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4e6 [ 443.169164][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x500 [ 443.177003][ T8667] netlink: 'syz.2.590': attribute type 10 has an invalid length. [ 443.193551][ T8660] kvm: kvm [8658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x586 [ 443.575026][ T8081] veth0_vlan: entered promiscuous mode [ 443.597011][ T8081] veth1_vlan: entered promiscuous mode [ 443.805103][ T8081] veth0_macvtap: entered promiscuous mode [ 443.834969][ T9] usb 3-1: USB disconnect, device number 13 [ 443.866274][ T8081] veth1_macvtap: entered promiscuous mode [ 443.999940][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.070660][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.200517][ T87] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.204142][ T87] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.221933][ T87] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.233335][ T87] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.344136][ T8690] netlink: 'syz.2.593': attribute type 39 has an invalid length. [ 444.688425][ T8210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.836168][ T8700] netlink: 'syz.4.595': attribute type 10 has an invalid length. [ 445.098602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.098622][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.281915][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.281934][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.406249][ T8712] netlink: 'syz.2.596': attribute type 39 has an invalid length. [ 446.896225][ T8210] veth0_vlan: entered promiscuous mode [ 446.916755][ T8210] veth1_vlan: entered promiscuous mode [ 448.393735][ T8210] veth0_macvtap: entered promiscuous mode [ 448.439802][ T8210] veth1_macvtap: entered promiscuous mode [ 449.364271][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.370008][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.533557][ T1153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.541088][ T1153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.559368][ T1153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.973080][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.150824][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.150845][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.339355][ T8799] netlink: 'syz.2.613': attribute type 39 has an invalid length. [ 452.466714][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.466734][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.332122][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 454.220873][ T8827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.114161][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 457.755621][ T8907] netlink: 220 bytes leftover after parsing attributes in process `syz.2.640'. [ 458.586365][ T8932] overlayfs: missing 'workdir' [ 460.820545][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 463.770821][ T8969] overlayfs: missing 'workdir' [ 471.079879][ T8983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'. [ 471.345889][ T8986] netlink: 'syz.6.656': attribute type 15 has an invalid length. [ 471.345911][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.6.656'. [ 471.537572][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 471.642844][ T5870] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 471.896275][ T5870] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.896331][ T5870] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 471.896354][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.948968][ T5870] usb 7-1: config 0 descriptor?? [ 472.744638][ T5870] usb 7-1: bad CDC descriptors [ 472.758562][ T5870] usb 7-1: USB disconnect, device number 2 [ 477.111442][ T9076] fuse: Unknown parameter 'user_id00000000000000000000' [ 492.073156][ T5806] Bluetooth: hci1: link tx timeout [ 492.076985][ T5806] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 492.580480][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.720'. [ 493.227990][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 494.302477][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 503.967344][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.967414][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.533650][ T5802] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 507.682935][ T5802] usb 6-1: Using ep0 maxpacket: 32 [ 507.685205][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.685244][ T5802] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 507.685267][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.690382][ T5802] usb 6-1: config 0 descriptor?? [ 507.699244][ T5802] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 511.000138][ T44] usb 6-1: USB disconnect, device number 2 [ 517.055569][ T9454] Bluetooth: hci0: command 0x0406 tx timeout [ 518.818688][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 520.035869][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.782'. [ 520.258171][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.783'. [ 526.984935][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.800'. [ 530.906947][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.810'. [ 558.093293][ T9792] syz.6.846 (9792) used greatest stack depth: 17368 bytes left [ 559.586369][ T1153] bond0: (slave bond_slave_0): interface is now down [ 559.586398][ T1153] bond0: (slave bond_slave_1): interface is now down [ 559.590622][ T9826] netlink: 'syz.6.858': attribute type 10 has an invalid length. [ 559.594335][ T1153] bond0: now running without any active interface! [ 559.676906][ T9826] syz_tun: entered promiscuous mode [ 559.725220][ T9826] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 559.744713][ T6650] bond0: (slave syz_tun): interface is now down [ 559.745002][ T6650] bond0: now running without any active interface! [ 559.753120][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 559.845187][ T9833] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 559.902747][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 559.906757][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 559.906786][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.964799][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 559.964816][ T10] pvrusb2: ********** [ 559.964823][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 559.964834][ T10] pvrusb2: Important functionality might not be entirely working. [ 559.964846][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 559.964856][ T10] pvrusb2: ********** [ 560.187516][ T2357] pvrusb2: Invalid write control endpoint [ 560.279557][ T9834] bridge0: port 3(syz_tun) entered blocking state [ 560.279871][ T9834] bridge0: port 3(syz_tun) entered disabled state [ 560.280158][ T9834] syz_tun: entered allmulticast mode [ 560.320070][ T9834] syz_tun: entered promiscuous mode [ 560.332296][ T9834] bridge0: port 3(syz_tun) entered blocking state [ 560.332466][ T9834] bridge0: port 3(syz_tun) entered forwarding state [ 560.382464][ T31] usb 4-1: USB disconnect, device number 11 [ 560.436393][ T2357] pvrusb2: Invalid write control endpoint [ 560.436407][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 560.436416][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 560.436423][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 560.436432][ T2357] pvrusb2: Device being rendered inoperable [ 560.436712][ T2357] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 560.436820][ T2357] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 560.441989][ T9841] 9pnet_virtio: no channels available for device syz [ 560.493147][ T2357] pvrusb2: Attached sub-driver cx25840 [ 560.493158][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 560.493163][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 560.836142][ T5806] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 560.864225][ T9849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.864'. [ 561.009461][ T5806] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 561.042882][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 561.130375][ T9860] bridge0: port 3(syz_tun) entered blocking state [ 561.139402][ T9860] bridge0: port 3(syz_tun) entered disabled state [ 561.142263][ T9860] syz_tun: entered allmulticast mode [ 561.160989][ T9860] syz_tun: entered promiscuous mode [ 561.161632][ T9860] bridge0: port 3(syz_tun) entered blocking state [ 561.161748][ T9860] bridge0: port 3(syz_tun) entered forwarding state [ 561.207689][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 561.207748][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.208847][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 561.208872][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 561.208891][ T10] usb 5-1: Manufacturer: syz [ 561.255372][ T10] usb 5-1: config 0 descriptor?? [ 561.324597][ T5806] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 561.352820][ T10] rc_core: IR keymap rc-hauppauge not found [ 561.352841][ T10] Registered IR keymap rc-empty [ 561.356852][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 561.358887][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 561.529419][ T9843] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 561.539386][ T9180] usb 5-1: USB disconnect, device number 10 [ 561.649911][ T9868] batman_adv: batadv0: Adding interface: dummy0 [ 561.649929][ T9868] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.649959][ T9868] batman_adv: batadv0: Interface activated: dummy0 [ 561.727953][ T9871] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 561.745771][ T9868] batadv0: mtu less than device minimum [ 561.759351][ T9868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.781074][ T9868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.784738][ T9851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 561.800751][ T9868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.817794][ T9868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.833548][ T9868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.837655][ T9868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.853691][ T9868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.871668][ T9868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.988110][ T9876] netlink: 36 bytes leftover after parsing attributes in process `syz.3.872'. [ 562.085278][ T9863] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 562.279969][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 562.321137][ T9891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.876'. [ 562.391702][ T5806] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 562.435144][ T9891] bridge0: port 3(syz_tun) entered disabled state [ 562.446152][ T9891] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.446349][ T9891] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.067263][ T9885] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 563.145296][ T9893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 563.212794][ T5870] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 563.363415][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 563.371475][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 563.390353][ T5870] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 563.390383][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.390403][ T5870] usb 3-1: Product: syz [ 563.390417][ T5870] usb 3-1: Manufacturer: syz [ 563.390429][ T5870] usb 3-1: SerialNumber: syz [ 563.487993][ T5870] usb 3-1: config 0 descriptor?? [ 563.503195][ T5870] hub 3-1:0.0: bad descriptor, ignoring hub [ 563.503233][ T5870] hub 3-1:0.0: probe with driver hub failed with error -5 [ 563.528756][ T5870] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 563.948702][ T9945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.982900][ T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 564.110650][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.110719][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.132842][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 564.135441][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 564.137646][ T44] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 564.137672][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.137691][ T44] usb 5-1: Product: syz [ 564.137703][ T44] usb 5-1: Manufacturer: syz [ 564.137710][ T44] usb 5-1: SerialNumber: syz [ 564.142970][ T44] usb 5-1: config 0 descriptor?? [ 564.162248][ T44] hub 5-1:0.0: bad descriptor, ignoring hub [ 564.162285][ T44] hub 5-1:0.0: probe with driver hub failed with error -5 [ 564.179990][ T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.580051][ T37] audit: type=1326 audit(1770588516.961:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9929 comm="syz.4.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a65aeb9 code=0x0 [ 564.632155][ T10] usb 5-1: USB disconnect, device number 11 [ 564.713747][ T9953] netlink: 104 bytes leftover after parsing attributes in process `syz.6.892'. [ 564.815435][ T9942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 564.815665][ T9942] block device autoloading is deprecated and will be removed. [ 564.916037][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 565.062979][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 565.065544][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 565.065572][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.100909][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 565.100928][ T31] pvrusb2: ********** [ 565.100934][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 565.100946][ T31] pvrusb2: Important functionality might not be entirely working. [ 565.100954][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 565.100965][ T31] pvrusb2: ********** [ 565.305730][ T2357] pvrusb2: Invalid write control endpoint [ 565.467217][ T2357] pvrusb2: Invalid write control endpoint [ 565.467234][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 565.467243][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 565.467251][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 565.467261][ T2357] pvrusb2: Device being rendered inoperable [ 565.474726][ T2357] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 565.474789][ T2357] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 565.487083][ T2357] pvrusb2: Attached sub-driver cx25840 [ 565.487098][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 565.487107][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 565.567530][ T31] usb 4-1: USB disconnect, device number 12 [ 565.671615][ T9959] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 566.202512][ T5806] Bluetooth: Frame is too long (len 18, expected len 4) [ 566.286051][ T9962] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.314045][ T9962] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.381776][ T9962] batman_adv: batadv0: Interface deactivated: dummy0 [ 566.442271][ T5149] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 566.486310][ T5149] usb 3-1: device reset changed ep0 maxpacket size! [ 566.511765][ T9180] usb 3-1: USB disconnect, device number 14 [ 566.912848][ T9180] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 567.073235][ T9180] usb 3-1: Using ep0 maxpacket: 8 [ 567.075807][ T9180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 567.075835][ T9180] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 567.075865][ T9180] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 567.075892][ T9180] usb 3-1: config 1 interface 0 has no altsetting 1 [ 567.083950][ T9180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.083979][ T9180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.083998][ T9180] usb 3-1: Product: syz [ 567.084011][ T9180] usb 3-1: Manufacturer: syz [ 567.084025][ T9180] usb 3-1: SerialNumber: syz [ 567.107323][ T9978] 9pnet_virtio: no channels available for device syz [ 567.158956][ T9180] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 567.214284][ T9962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.219418][ T9962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.339425][ T9180] usb 3-1: USB disconnect, device number 15 [ 567.692886][ T5802] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 567.843312][ T5802] usb 5-1: Using ep0 maxpacket: 32 [ 567.849498][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.849531][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.849569][ T5802] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 567.849592][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.856946][ T5802] usb 5-1: config 0 descriptor?? [ 568.073940][ T5802] usbhid 5-1:0.0: can't add hid device: -71 [ 568.074049][ T5802] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 568.125119][ T5802] usb 5-1: USB disconnect, device number 12 [ 568.679366][ T9994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.906'. [ 568.679400][ T9994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.906'. [ 568.763623][ T9970] bridge0: port 3(syz_tun) entered blocking state [ 568.763777][ T9970] bridge0: port 3(syz_tun) entered disabled state [ 568.764089][ T9970] syz_tun: entered allmulticast mode [ 568.768903][ T9970] syz_tun: entered promiscuous mode [ 568.769761][ T9970] bridge0: port 3(syz_tun) entered blocking state [ 568.769880][ T9970] bridge0: port 3(syz_tun) entered forwarding state [ 568.789854][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.791023][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.806623][ T9994] gretap0: entered promiscuous mode [ 568.813472][ T9994] batadv_slave_1: entered promiscuous mode [ 568.813686][ T9994] batadv_slave_1: left promiscuous mode [ 568.908016][ T9994] gretap0: left promiscuous mode [ 569.031688][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.031934][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.032021][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.407316][ T44] libceph: connect (1)[c::]:6789 error -101 [ 569.527739][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 569.624447][ T44] libceph: connect (1)[c::]:6789 error -101 [ 569.624652][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 569.845157][ T5802] libceph: connect (1)[b::]:6789 error -101 [ 569.845363][ T5802] libceph: mon0 (1)[b::]:6789 connect error [ 569.888770][ T9180] libceph: connect (1)[c::]:6789 error -101 [ 569.888964][ T9180] libceph: mon0 (1)[c::]:6789 connect error [ 569.993271][T10003] ceph: No mds server is up or the cluster is laggy [ 570.043335][T10013] ceph: No mds server is up or the cluster is laggy [ 570.114572][ T5802] libceph: connect (1)[b::]:6789 error -101 [ 570.114956][ T5802] libceph: mon0 (1)[b::]:6789 connect error [ 570.202102][ T9955] net_ratelimit: 11 callbacks suppressed [ 570.202121][ T9955] Set syz1 is full, maxelem 65536 reached [ 570.258181][T10017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 570.347181][ T9180] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 570.393029][ T44] libceph: connect (1)[c::]:6789 error -101 [ 570.393150][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 570.448303][T10026] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 570.505037][ T9180] usb 7-1: Using ep0 maxpacket: 32 [ 570.511606][ T9180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.511635][ T9180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.511657][ T9180] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 570.511669][ T9180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.553538][ T9180] usb 7-1: config 0 descriptor?? [ 570.770479][T10019] clip:clip_setentry: non-CLIP VCC [ 570.785557][ T9180] usbhid 7-1:0.0: can't add hid device: -71 [ 570.785790][ T9180] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 570.806159][ T9180] usb 7-1: USB disconnect, device number 3 [ 571.770955][T10041] netlink: 36 bytes leftover after parsing attributes in process `syz.6.919'. [ 571.999746][ T37] audit: type=1326 audit(1770588524.421:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.5.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4c37aeb9 code=0x0 [ 572.309037][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 572.715169][T10067] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 573.206691][T10077] Set syz1 is full, maxelem 0 reached [ 573.393925][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.932'. [ 573.451288][T10086] Bluetooth: (null): Too short H5 packet [ 573.892771][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 574.062729][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 574.065174][ T31] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 574.065201][ T31] usb 5-1: config 179 has no interface number 0 [ 574.065247][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 574.065287][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 574.065314][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 574.065339][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 574.065366][ T31] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 574.065392][ T31] usb 5-1: config 179 interface 65 has no altsetting 0 [ 574.065425][ T31] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 574.065447][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.255371][T10102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 574.304432][ T31] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 574.376097][ T5149] input input9: unable to receive magic message: -71 [ 574.476071][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 574.517317][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'. [ 574.517352][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'. [ 574.553442][ T5149] input input9: unable to receive magic message: -71 [ 574.553817][T10111] gretap0: entered promiscuous mode [ 574.586247][T10111] batadv_slave_1: entered promiscuous mode [ 574.586460][T10111] batadv_slave_1: left promiscuous mode [ 574.789001][ T5149] input input9: unable to receive magic message: -71 [ 574.845335][T10111] gretap0: left promiscuous mode [ 574.932933][ T5149] input input9: unable to receive magic message: -71 [ 575.213639][ T9809] input input9: unable to receive magic message: -71 [ 575.354952][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 575.355349][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 575.355420][ T31] usb 5-1: USB disconnect, device number 13 [ 575.380825][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 575.592995][ T5861] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 575.762935][ T5861] usb 7-1: Using ep0 maxpacket: 8 [ 575.766972][ T5861] usb 7-1: config 0 has no interfaces? [ 575.775229][ T5861] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.775257][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.775277][ T5861] usb 7-1: Product: syz [ 575.775290][ T5861] usb 7-1: Manufacturer: syz [ 575.775303][ T5861] usb 7-1: SerialNumber: syz [ 575.786383][ T5861] usb 7-1: config 0 descriptor?? [ 576.013459][ T37] audit: type=1326 audit(1770588528.441:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.6.946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcf6a7aeb9 code=0x0 [ 576.131098][ T5802] usb 7-1: USB disconnect, device number 4 [ 576.142482][T10123] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 576.252813][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 576.326904][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.955'. [ 576.406221][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 576.408079][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.408108][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.408139][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 576.408166][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.441520][ T31] usb 3-1: config 0 descriptor?? [ 576.687769][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 576.687895][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 576.700762][ T31] usb 3-1: USB disconnect, device number 16 [ 577.386466][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.959'. [ 577.386499][T10150] netlink: 'syz.5.959': attribute type 7 has an invalid length. [ 577.386510][T10150] netlink: 'syz.5.959': attribute type 8 has an invalid length. [ 577.386520][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.959'. [ 577.582816][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 577.743920][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 577.747397][ T5870] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 577.747425][ T5870] usb 3-1: config 179 has no interface number 0 [ 577.747491][ T5870] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 577.747517][ T5870] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 577.747545][ T5870] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 577.747571][ T5870] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 577.747597][ T5870] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 577.747624][ T5870] usb 3-1: config 179 interface 65 has no altsetting 0 [ 577.747656][ T5870] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 577.747678][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.959573][ T5870] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 578.044707][ T5149] input input10: unable to receive magic message: -110 [ 578.308562][ T31] usb 3-1: USB disconnect, device number 17 [ 578.308713][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 578.862772][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 579.034704][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 579.038441][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 579.043786][ T31] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 579.043816][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.043836][ T31] usb 7-1: Product: syz [ 579.043849][ T31] usb 7-1: Manufacturer: syz [ 579.043862][ T31] usb 7-1: SerialNumber: syz [ 579.059770][ T31] usb 7-1: config 0 descriptor?? [ 579.094094][ T31] hub 7-1:0.0: bad descriptor, ignoring hub [ 579.094132][ T31] hub 7-1:0.0: probe with driver hub failed with error -5 [ 579.116231][ T31] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.382549][ T31] usb 7-1: USB disconnect, device number 5 [ 579.524039][ T9485] udevd[9485]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.005003][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 580.005030][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.005053][T10188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.069243][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.069272][T10188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.495858][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 580.643102][T10202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.652984][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 580.654895][ T5870] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 580.654921][ T5870] usb 6-1: config 179 has no interface number 0 [ 580.654966][ T5870] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 580.654991][ T5870] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 580.655019][ T5870] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 580.655045][ T5870] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 580.655070][ T5870] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 580.655095][ T5870] usb 6-1: config 179 interface 65 has no altsetting 0 [ 580.655127][ T5870] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 580.655149][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.723625][T10203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.727268][T10202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.858551][ T5870] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input11 [ 580.912812][ T5149] input input11: unable to receive magic message: -71 [ 581.029458][ T5149] input input11: unable to receive magic message: -71 [ 581.110713][ T5870] usb 6-1: USB disconnect, device number 3 [ 581.110811][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 581.726884][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 581.733975][ T5861] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 581.912855][ T5861] usb 7-1: Using ep0 maxpacket: 32 [ 581.929686][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.929718][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.929754][ T5861] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 581.929776][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.935350][ T5861] usb 7-1: config 0 descriptor?? [ 582.370678][ T5861] usbhid 7-1:0.0: can't add hid device: -71 [ 582.370801][ T5861] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 582.377397][ T5861] usb 7-1: USB disconnect, device number 6 [ 582.497228][T10227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.497252][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.497287][T10227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.987'. [ 582.497504][T10227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.987'. [ 583.217517][T10055] Set syz1 is full, maxelem 65536 reached [ 583.781306][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1002'. [ 583.781344][T10268] netlink: 'syz.3.1002': attribute type 7 has an invalid length. [ 583.781358][T10268] netlink: 'syz.3.1002': attribute type 8 has an invalid length. [ 583.781371][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 584.114184][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 584.114211][T10289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.114242][T10289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.175515][T10289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.175542][T10289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.063433][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 585.242065][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 585.257248][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 585.257277][ T10] usb 7-1: config 179 has no interface number 0 [ 585.257323][ T10] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 585.257351][ T10] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 585.257387][ T10] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 585.257414][ T10] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 585.257441][ T10] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 585.257467][ T10] usb 7-1: config 179 interface 65 has no altsetting 0 [ 585.257502][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 585.257525][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.398566][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input12 [ 585.456060][ T5149] input input12: unable to receive magic message: -110 [ 585.632198][T10311] input input12: unable to receive magic message: -32 [ 585.775898][ T5861] usb 7-1: USB disconnect, device number 7 [ 585.778289][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 585.778396][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 586.052798][ T9180] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 586.206106][ T9180] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 586.206134][ T9180] usb 5-1: config 0 has no interface number 0 [ 586.206177][ T9180] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.206202][ T9180] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.206250][ T9180] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 586.206272][ T9180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.211282][ T9180] usb 5-1: config 0 descriptor?? [ 586.756554][ T9180] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.000E/input/input13 [ 586.842750][ T5802] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 586.993432][ T5802] usb 4-1: Using ep0 maxpacket: 32 [ 587.001088][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.001121][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.001145][ T5802] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 587.001157][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.062151][ T5802] usb 4-1: config 0 descriptor?? [ 587.221753][T10369] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 587.270598][ T9180] holtek_kbd 0003:04D9:A055.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 587.286251][ T5802] usbhid 4-1:0.0: can't add hid device: -71 [ 587.286367][ T5802] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 587.307024][ T5802] usb 4-1: USB disconnect, device number 13 [ 587.449324][ T9180] usb 5-1: USB disconnect, device number 14 [ 587.637252][T10377] fido_id[10377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 587.960385][T10391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'. [ 587.968288][T10391] bridge0: port 3(syz_tun) entered disabled state [ 587.968538][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.968737][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.987289][T10366] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 588.139551][T10396] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 589.132837][ T5870] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 589.161008][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 589.285546][ T5870] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 589.285574][ T5870] usb 7-1: config 0 has no interface number 0 [ 589.285615][ T5870] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.285640][ T5870] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.285676][ T5870] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 589.285699][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.290017][ T5870] usb 7-1: config 0 descriptor?? [ 589.828739][ T5870] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.000F/input/input14 [ 590.171017][T10443] syz.3.1076 (10443) used greatest stack depth: 15744 bytes left [ 590.381287][ T5870] holtek_kbd 0003:04D9:A055.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 590.420987][ T5870] usb 7-1: USB disconnect, device number 8 [ 590.538135][T10456] fido_id[10456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 591.403077][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 591.580941][ T5806] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 592.126013][T10508] io-wq is not configured for unbound workers [ 592.346171][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 592.531997][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'. [ 592.532031][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'. [ 592.640810][T10530] Set syz1 is full, maxelem 0 reached [ 592.703195][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 592.868776][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 592.868803][ T10] usb 6-1: config 0 has no interface number 0 [ 592.868843][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.868866][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.868901][ T10] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 592.868923][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.912219][ T10] usb 6-1: config 0 descriptor?? [ 593.489436][ T10] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0010/input/input15 [ 593.934529][ T10] holtek_kbd 0003:04D9:A055.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 593.949192][ T10] usb 6-1: USB disconnect, device number 4 [ 594.141513][T10574] fido_id[10574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 594.143168][ T5802] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 594.282829][ T5802] usb 4-1: device descriptor read/64, error -71 [ 594.525170][ T5802] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 594.652803][ T5802] usb 4-1: device descriptor read/64, error -71 [ 594.763937][ T5802] usb usb4-port1: attempt power cycle [ 595.112807][ T5802] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 595.133756][ T5802] usb 4-1: device descriptor read/8, error -71 [ 595.341787][ T5459] veth0_macvtap: left promiscuous mode [ 595.393427][ T5802] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 595.414689][ T5802] usb 4-1: device descriptor read/8, error -71 [ 595.524010][ T5802] usb usb4-port1: unable to enumerate USB device [ 595.730498][T10639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 595.902782][ T5861] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 596.064810][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 596.067409][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 596.070288][ T5861] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 596.070317][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.070337][ T5861] usb 3-1: Product: syz [ 596.070351][ T5861] usb 3-1: Manufacturer: syz [ 596.070364][ T5861] usb 3-1: SerialNumber: syz [ 596.125098][ T5861] usb 3-1: config 0 descriptor?? [ 596.149894][ T5861] hub 3-1:0.0: bad descriptor, ignoring hub [ 596.149934][ T5861] hub 3-1:0.0: probe with driver hub failed with error -5 [ 596.169737][ T5861] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 596.556946][ T10] usb 3-1: USB disconnect, device number 18 [ 596.736902][T10668] Bluetooth: MGMT ver 1.23 [ 597.300648][T10695] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 597.372779][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 597.524893][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 597.524929][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 597.524969][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 597.524990][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.573168][T10685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 597.581364][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.632742][ T5861] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 597.706896][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 597.802828][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 597.819919][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 597.820552][ T10] usb 3-1: USB disconnect, device number 19 [ 597.840935][ T5861] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 597.840966][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.840985][ T5861] usb 7-1: Product: syz [ 597.840999][ T5861] usb 7-1: Manufacturer: syz [ 597.841012][ T5861] usb 7-1: SerialNumber: syz [ 597.928961][ T5861] usb 7-1: config 0 descriptor?? [ 597.954862][ T5861] hub 7-1:0.0: bad descriptor, ignoring hub [ 597.954900][ T5861] hub 7-1:0.0: probe with driver hub failed with error -5 [ 597.965942][ T5861] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.195473][ T37] audit: type=1326 audit(1770588550.621:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10696 comm="syz.6.1166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcf6a7aeb9 code=0x0 [ 598.322794][ T5861] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 598.452797][ T5861] usb 5-1: device descriptor read/64, error -71 [ 598.713081][ T5861] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 598.865099][ T5861] usb 5-1: device descriptor read/64, error -71 [ 598.983282][ T5861] usb usb5-port1: attempt power cycle [ 599.332819][ T5861] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 599.353754][ T5861] usb 5-1: device descriptor read/8, error -71 [ 599.593414][ T5861] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 599.614694][ T5861] usb 5-1: device descriptor read/8, error -71 [ 599.725208][ T5861] usb usb5-port1: unable to enumerate USB device [ 600.068551][T10739] veth1_to_team: entered promiscuous mode [ 600.317552][T10738] veth1_to_team: left promiscuous mode [ 600.402398][ T5802] usb 7-1: USB disconnect, device number 9 [ 600.556768][T10752] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 601.191801][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1196'. [ 601.542945][ T5861] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 601.658097][T10796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.692769][ T5861] usb 6-1: Using ep0 maxpacket: 16 [ 601.695081][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 601.697722][ T5861] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 601.697739][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.697749][ T5861] usb 6-1: Product: syz [ 601.697757][ T5861] usb 6-1: Manufacturer: syz [ 601.697765][ T5861] usb 6-1: SerialNumber: syz [ 601.706089][ T5861] usb 6-1: config 0 descriptor?? [ 601.726673][ T5861] hub 6-1:0.0: bad descriptor, ignoring hub [ 601.726713][ T5861] hub 6-1:0.0: probe with driver hub failed with error -5 [ 601.731246][ T5861] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.732749][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 601.764623][T10796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.768005][T10796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.862913][ T10] usb 4-1: device descriptor read/64, error -71 [ 602.015319][ T37] audit: type=1326 audit(1770588554.441:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10774 comm="syz.5.1198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4c37aeb9 code=0x0 [ 602.113389][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 602.139159][T10807] macvtap1: entered allmulticast mode [ 602.139180][T10807] veth0_macvtap: entered allmulticast mode [ 602.242742][ T10] usb 4-1: device descriptor read/64, error -71 [ 602.353303][ T10] usb usb4-port1: attempt power cycle [ 602.703933][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 602.774546][ T10] usb 4-1: device descriptor read/8, error -71 [ 603.034215][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 603.073855][ T10] usb 4-1: device descriptor read/8, error -71 [ 603.209405][ T10] usb usb4-port1: unable to enumerate USB device [ 603.225501][T10844] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 603.629236][T10857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.681636][T10857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.683570][T10857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.256754][ T5861] usb 6-1: USB disconnect, device number 6 [ 604.902993][ T5861] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 604.988946][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.033177][ T9180] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 605.048670][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.053047][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 605.054746][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.055186][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 605.059546][ T5861] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 605.059574][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.059603][ T5861] usb 7-1: Product: syz [ 605.059616][ T5861] usb 7-1: Manufacturer: syz [ 605.059630][ T5861] usb 7-1: SerialNumber: syz [ 605.135249][ T5861] usb 7-1: config 0 descriptor?? [ 605.150138][ T5861] hub 7-1:0.0: bad descriptor, ignoring hub [ 605.150175][ T5861] hub 7-1:0.0: probe with driver hub failed with error -5 [ 605.176902][ T5861] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17 [ 605.183943][ T9180] usb 3-1: Using ep0 maxpacket: 16 [ 605.186096][ T9180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 605.192208][ T9180] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 605.192236][ T9180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.192254][ T9180] usb 3-1: Product: syz [ 605.192267][ T9180] usb 3-1: Manufacturer: syz [ 605.192280][ T9180] usb 3-1: SerialNumber: syz [ 605.230484][ T9180] usb 3-1: config 0 descriptor?? [ 605.242032][ T9180] hub 3-1:0.0: bad descriptor, ignoring hub [ 605.242070][ T9180] hub 3-1:0.0: probe with driver hub failed with error -5 [ 605.261529][ T9180] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.533817][ T5884] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 605.585733][ T5910] usb 3-1: USB disconnect, device number 20 [ 605.629675][ T9946] udevd[9946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.662789][ T5884] usb 6-1: device descriptor read/64, error -71 [ 605.902780][ T5884] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 606.032835][ T9180] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 606.050503][ T5884] usb 6-1: device descriptor read/64, error -71 [ 606.163678][ T5884] usb usb6-port1: attempt power cycle [ 606.204445][ T9180] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 606.204480][ T9180] usb 4-1: config 0 has no interface number 0 [ 606.204518][ T9180] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.204532][ T9180] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.204553][ T9180] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 606.204565][ T9180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.214900][ T9180] usb 4-1: config 0 descriptor?? [ 606.532758][ T5884] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 606.555013][ T5884] usb 6-1: device descriptor read/8, error -71 [ 606.715094][ T9180] usbhid 4-1:0.1: can't add hid device: -71 [ 606.715204][ T9180] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 606.725690][ T9180] usb 4-1: USB disconnect, device number 22 [ 606.802735][ T5884] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 606.835109][ T5884] usb 6-1: device descriptor read/8, error -71 [ 606.953607][ T5884] usb usb6-port1: unable to enumerate USB device [ 607.022551][T10954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.063980][ T9180] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 607.087536][T10954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.088857][T10954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.212779][ T9180] usb 5-1: Using ep0 maxpacket: 16 [ 607.215947][ T9180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 607.218438][ T9180] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 607.218467][ T9180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.218485][ T9180] usb 5-1: Product: syz [ 607.218498][ T9180] usb 5-1: Manufacturer: syz [ 607.218510][ T9180] usb 5-1: SerialNumber: syz [ 607.273128][ T9180] usb 5-1: config 0 descriptor?? [ 607.276024][ T9180] hub 5-1:0.0: bad descriptor, ignoring hub [ 607.276064][ T9180] hub 5-1:0.0: probe with driver hub failed with error -5 [ 607.280640][ T9180] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.537820][ T37] audit: type=1326 audit(1770588559.961:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10946 comm="syz.4.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e1a65aeb9 code=0x0 [ 608.852948][ T5861] usb 7-1: USB disconnect, device number 10 [ 609.317995][T11006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1283'. [ 609.318415][T11006] netlink: 'syz.6.1283': attribute type 7 has an invalid length. [ 609.318430][T11006] netlink: 'syz.6.1283': attribute type 8 has an invalid length. [ 609.318442][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1283'. [ 609.802784][ T5861] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 609.936397][ T5861] usb 6-1: device descriptor read/64, error -71 [ 609.975048][ T5884] usb 5-1: USB disconnect, device number 19 [ 610.172922][ T5861] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 610.286690][T11039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1296'. [ 610.286726][T11039] netlink: 'syz.3.1296': attribute type 7 has an invalid length. [ 610.286739][T11039] netlink: 'syz.3.1296': attribute type 8 has an invalid length. [ 610.286751][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 610.302730][ T5861] usb 6-1: device descriptor read/64, error -71 [ 610.314037][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 610.413030][ T5861] usb usb6-port1: attempt power cycle [ 610.482969][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 610.487524][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.487555][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.487591][ T10] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 610.487612][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.515966][ T10] usb 7-1: config 0 descriptor?? [ 610.744421][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 610.744547][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 610.757071][ T10] usb 7-1: USB disconnect, device number 11 [ 610.775837][ T5861] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 610.793598][ T5861] usb 6-1: device descriptor read/8, error -71 [ 611.042966][ T5861] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 611.063769][ T5861] usb 6-1: device descriptor read/8, error -71 [ 611.173131][ T5861] usb usb6-port1: unable to enumerate USB device [ 611.202823][ T5884] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 611.337287][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 611.337312][T11073] netlink: 'syz.2.1308': attribute type 7 has an invalid length. [ 611.337319][T11073] netlink: 'syz.2.1308': attribute type 8 has an invalid length. [ 611.337331][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 611.385254][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 611.401026][ T5884] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 611.401056][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.401075][ T5884] usb 5-1: Product: syz [ 611.401090][ T5884] usb 5-1: Manufacturer: syz [ 611.401104][ T5884] usb 5-1: SerialNumber: syz [ 611.424789][ T5884] usb 5-1: config 0 descriptor?? [ 611.713215][ T5884] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 020 [ 612.192792][ T5884] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 612.333901][T11064] i2c i2c-1: failure reading status [ 612.336618][ T10] usb 5-1: USB disconnect, device number 20 [ 612.344932][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 612.356663][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 612.372435][ T5884] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 612.372465][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.372486][ T5884] usb 3-1: Product: syz [ 612.372500][ T5884] usb 3-1: Manufacturer: syz [ 612.372513][ T5884] usb 3-1: SerialNumber: syz [ 612.440187][T11109] veth0_macvtap: entered promiscuous mode [ 612.440386][T11109] macvtap1: entered allmulticast mode [ 612.440399][T11109] veth0_macvtap: entered allmulticast mode [ 612.440680][ T5884] usb 3-1: config 0 descriptor?? [ 612.454144][ T5884] hub 3-1:0.0: bad descriptor, ignoring hub [ 612.454182][ T5884] hub 3-1:0.0: probe with driver hub failed with error -5 [ 612.472523][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.661490][ T5861] usb 3-1: USB disconnect, device number 21 [ 612.913552][ T5910] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 613.086742][ T5910] usb 7-1: Using ep0 maxpacket: 8 [ 613.088644][ T5910] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 613.088667][ T5910] usb 7-1: config 179 has no interface number 0 [ 613.088711][ T5910] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 613.088737][ T5910] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 613.088763][ T5910] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 613.088787][ T5910] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 613.088808][ T5910] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 613.088832][ T5910] usb 7-1: config 179 interface 65 has no altsetting 0 [ 613.088952][ T5910] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 613.088975][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.222591][ T5910] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input18 [ 613.601670][ T5910] usb 7-1: USB disconnect, device number 12 [ 613.601777][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 615.360613][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'. [ 615.582878][T11188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1346'. [ 616.386049][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1358'. [ 616.452541][T11217] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.1349'. [ 616.770462][T11220] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1360'. [ 617.853946][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 617.947135][T11252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1371'. [ 618.462750][ T5861] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 618.614638][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 618.617826][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.617853][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.617875][ T5861] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 618.617964][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.626825][ T5861] usb 3-1: config 0 descriptor?? [ 618.838404][ T5861] usbhid 3-1:0.0: can't add hid device: -71 [ 618.838487][ T5861] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 618.860738][ T5861] usb 3-1: USB disconnect, device number 22 [ 619.123056][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 619.314281][T11280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1383'. [ 619.818984][T11301] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1392'. [ 619.862393][T11301] vlan2: entered promiscuous mode [ 619.862415][T11301] bond0: entered promiscuous mode [ 619.862428][T11301] bond_slave_0: entered promiscuous mode [ 619.903664][T11301] bond_slave_1: entered promiscuous mode [ 619.903973][T11301] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 619.992787][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 620.242875][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 620.246971][ T10] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 620.247011][ T10] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 620.247030][ T10] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.247045][ T10] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 620.249807][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 620.249837][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.249857][ T10] usb 3-1: Product: syz [ 620.249871][ T10] usb 3-1: Manufacturer: syz [ 620.249885][ T10] usb 3-1: SerialNumber: syz [ 620.284225][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 620.493089][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input19 [ 620.544673][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1397'. [ 620.612970][ T10] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 620.612990][ T10] (id 0x00) [ 620.711603][ T10] rc_core: IR keymap rc-imon-pad not found [ 620.711709][ T10] Registered IR keymap rc-empty [ 620.711796][ T10] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 620.711815][ T10] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 620.817025][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 620.825778][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input20 [ 620.857371][ T10] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:23> initialized [ 621.403667][ T5861] usb 3-1: USB disconnect, device number 23 [ 621.862911][T11347] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1408'. [ 623.807656][T11388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1425'. [ 623.807693][T11388] netlink: 'syz.2.1425': attribute type 7 has an invalid length. [ 623.807707][T11388] netlink: 'syz.2.1425': attribute type 8 has an invalid length. [ 623.807720][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 623.822449][T11388] erspan0: entered promiscuous mode [ 623.842779][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 623.850821][T11388] batadv_slave_1: entered promiscuous mode [ 623.892790][T11388] erspan0: left promiscuous mode [ 623.936009][T11388] batadv_slave_1: left promiscuous mode [ 623.992794][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 623.994605][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.994631][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.994652][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 623.994664][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.002567][ T10] usb 4-1: config 0 descriptor?? [ 624.291421][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 624.291538][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 624.323122][ T10] usb 4-1: USB disconnect, device number 23 [ 625.176178][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1439'. [ 625.558025][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.558093][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.498672][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1454'. [ 626.819836][T11485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1462'. [ 627.279485][ T37] audit: type=1326 audit(1770588579.701:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.6.1468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcf6a7aeb9 code=0x0 [ 628.342802][ T9180] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 628.502999][ T9180] usb 4-1: Using ep0 maxpacket: 8 [ 628.524579][ T9180] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.524638][ T9180] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.524662][ T9180] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 628.524684][ T9180] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 628.530323][ T9180] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.530353][ T9180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.530373][ T9180] usb 4-1: Product: syz [ 628.530387][ T9180] usb 4-1: Manufacturer: syz [ 628.530401][ T9180] usb 4-1: SerialNumber: syz [ 628.640028][ T9180] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 628.840280][ T5802] usb 4-1: USB disconnect, device number 24 [ 629.245401][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1479'. [ 629.960311][T11551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 630.025514][T11555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.097331][T11555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.292730][ T9180] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 630.443349][ T9180] usb 7-1: Using ep0 maxpacket: 32 [ 630.445335][ T9180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.445365][ T9180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.445402][ T9180] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 630.445423][ T9180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.471758][ T9180] usb 7-1: config 0 descriptor?? [ 630.509530][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 630.684260][ T9180] usbhid 7-1:0.0: can't add hid device: -71 [ 630.684384][ T9180] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 630.712305][ T9180] usb 7-1: USB disconnect, device number 13 [ 630.759327][T11588] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1501'. [ 631.391511][T11617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1512'. [ 631.391548][T11617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1512'. [ 631.552760][ T9180] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 631.654023][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1517'. [ 631.654048][T11627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.682851][ T9180] usb 5-1: device descriptor read/64, error -71 [ 631.724363][T11627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.763672][T11627] batman_adv: batadv0: Removing interface: dummy0 [ 631.942776][ T9180] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 632.058540][T11641] kAFS: unable to lookup cell 'ÿ' [ 632.092778][ T9180] usb 5-1: device descriptor read/64, error -71 [ 632.172831][ T5884] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 632.203574][ T9180] usb usb5-port1: attempt power cycle [ 632.346565][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 632.349223][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.349307][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.349342][ T5884] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 632.349355][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.356613][ T5884] usb 6-1: config 0 descriptor?? [ 632.562817][ T9180] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 632.583714][ T9180] usb 5-1: device descriptor read/8, error -71 [ 632.632882][ T5884] usbhid 6-1:0.0: can't add hid device: -71 [ 632.632995][ T5884] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 632.659354][ T5884] usb 6-1: USB disconnect, device number 15 [ 632.832731][ T9180] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 632.855601][ T9180] usb 5-1: device descriptor read/8, error -71 [ 632.965499][ T9180] usb usb5-port1: unable to enumerate USB device [ 633.254003][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 633.301107][T11668] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1531'. [ 633.382903][ T10] usb 7-1: device descriptor read/64, error -71 [ 633.625308][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 633.646253][ T37] audit: type=1326 audit(1770588586.071:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11681 comm="syz.5.1537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4c37aeb9 code=0x0 [ 633.664338][T11674] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1534'. [ 633.752894][ T10] usb 7-1: device descriptor read/64, error -71 [ 633.863796][ T10] usb usb7-port1: attempt power cycle [ 634.242809][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 634.264140][ T10] usb 7-1: device descriptor read/8, error -71 [ 634.502944][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 634.525883][ T10] usb 7-1: device descriptor read/8, error -71 [ 634.543363][T11706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1546'. [ 634.543379][T11706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1546'. [ 634.543397][T11706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1546'. [ 634.543422][T11706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1546'. [ 634.633342][ T10] usb usb7-port1: unable to enumerate USB device [ 634.930557][T11715] capability: warning: `syz.3.1550' uses 32-bit capabilities (legacy support in use) [ 638.076102][T11800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1585'. [ 638.076125][T11800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1585'. [ 638.184714][T11798] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.1572'. [ 639.345047][T11831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1596'. [ 639.345069][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1596'. [ 639.772969][ T5802] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 639.966696][ T5802] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 639.966724][ T5802] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.966743][ T5802] usb 6-1: config 0 has no interface number 0 [ 639.966789][ T5802] usb 6-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 639.971294][ T5802] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 639.971326][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.971567][ T5802] usb 6-1: Product: syz [ 639.971648][ T5802] usb 6-1: Manufacturer: syz [ 639.971714][ T5802] usb 6-1: SerialNumber: syz [ 640.096917][ T5802] usb 6-1: config 0 descriptor?? [ 640.177753][ T5802] yurex 6-1:0.50: Could not find endpoints [ 640.301182][T11845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1600'. [ 640.301205][T11845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1600'. [ 640.576839][T11854] macvtap2: entered allmulticast mode [ 640.584100][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 641.384947][T11872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1609'. [ 641.384962][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 643.033008][ T9180] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 643.212998][ T5802] usb 6-1: USB disconnect, device number 16 [ 643.241382][ T9180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.241400][ T9180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.308495][ T9180] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 643.308514][ T9180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 643.308525][ T9180] usb 5-1: SerialNumber: syz [ 643.412191][ T37] audit: type=1326 audit(1770588595.831:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11913 comm="syz.5.1625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4c37aeb9 code=0x0 [ 643.513468][ T9180] usb 5-1: 0:2 : does not exist [ 643.513535][ T9180] usb 5-1: unit 255 not found! [ 644.098553][T11932] __nla_validate_parse: 3 callbacks suppressed [ 644.098572][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1629'. [ 644.846855][T11948] macvtap3: entered allmulticast mode [ 645.723150][ T9180] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 645.843182][ T1212] tipc: Subscription rejected, illegal request [ 645.887756][ T9180] usb 3-1: Using ep0 maxpacket: 16 [ 645.890165][ T9180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 645.919704][ T9180] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 645.919724][ T9180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.919734][ T9180] usb 3-1: Product: syz [ 645.919742][ T9180] usb 3-1: Manufacturer: syz [ 645.919757][ T9180] usb 3-1: SerialNumber: syz [ 645.938946][ T9180] usb 3-1: config 0 descriptor?? [ 645.946002][ T9180] hub 3-1:0.0: bad descriptor, ignoring hub [ 645.946041][ T9180] hub 3-1:0.0: probe with driver hub failed with error -5 [ 645.992201][ T9180] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 646.429800][ T5861] usb 5-1: USB disconnect, device number 25 [ 646.714271][T11982] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1645'. [ 646.818643][ T5149] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 646.864595][ T5149] usb 3-1: device reset changed ep0 maxpacket size! [ 646.916416][ T9180] usb 3-1: USB disconnect, device number 24 [ 646.974957][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1648'. [ 647.223253][ T5861] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 647.225337][ T5910] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 647.283562][ T9180] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 647.373126][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 647.373282][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 647.380705][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 647.380722][ T5861] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 647.380735][ T5861] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 647.380750][ T5861] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 647.381953][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.381977][ T5910] usb 4-1: config 0 has no interfaces? [ 647.382005][ T5910] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 647.382026][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.420251][ T5910] usb 4-1: config 0 descriptor?? [ 647.433312][ T9180] usb 3-1: Using ep0 maxpacket: 8 [ 647.449584][ T9180] usb 3-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 647.449611][ T9180] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 647.449646][ T9180] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 647.449667][ T9180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.452741][ T5861] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 647.452767][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.452783][ T5861] usb 6-1: Product: syz [ 647.452796][ T5861] usb 6-1: Manufacturer: syz [ 647.452809][ T5861] usb 6-1: SerialNumber: syz [ 647.571810][ T5861] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 647.657088][ T5861] usb 4-1: USB disconnect, device number 25 [ 647.678587][ T5802] usb 6-1: USB disconnect, device number 17 [ 647.744289][ T5910] usb 3-1: USB disconnect, device number 25 [ 647.838363][T12005] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1655'. [ 647.846608][T12005] vlan2: entered promiscuous mode [ 647.846630][T12005] bond0: entered promiscuous mode [ 647.846643][T12005] bond_slave_0: entered promiscuous mode [ 647.846843][T12005] bond_slave_1: entered promiscuous mode [ 647.847026][T12005] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 648.034447][ T5861] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 648.183721][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 648.191932][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 648.198537][ T5861] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 648.198567][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.198586][ T5861] usb 7-1: Product: syz [ 648.198600][ T5861] usb 7-1: Manufacturer: syz [ 648.198613][ T5861] usb 7-1: SerialNumber: syz [ 648.206472][ T5861] usb 7-1: config 0 descriptor?? [ 648.227896][ T5861] hub 7-1:0.0: bad descriptor, ignoring hub [ 648.227933][ T5861] hub 7-1:0.0: probe with driver hub failed with error -5 [ 648.246855][ T5861] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22 [ 648.319846][T12012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1658'. [ 648.644716][ T37] audit: type=1800 audit(1770588601.061:11): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1663" name=14 dev="tmpfs" ino=2091 res=0 errno=0 [ 648.936315][ T5802] usb 7-1: USB disconnect, device number 18 [ 649.354403][T12043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1671'. [ 649.516367][ T5884] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 649.732745][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 649.736919][ T5884] usb 3-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 649.736947][ T5884] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 649.736983][ T5884] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 649.737004][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.890678][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1679'. [ 650.281274][ T9180] usb 3-1: USB disconnect, device number 26 [ 650.945680][T12074] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1681'. [ 651.049436][T12074] vlan2: entered promiscuous mode [ 651.049450][T12074] bond0: entered promiscuous mode [ 651.049530][T12074] bond_slave_0: entered promiscuous mode [ 651.049654][T12074] bond_slave_1: entered promiscuous mode [ 651.049786][T12074] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 652.524557][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 652.614405][ T9180] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 652.673009][ T5910] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 652.743485][ T9180] usb 5-1: device descriptor read/64, error -71 [ 652.823579][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 652.825562][ T5910] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 652.825588][ T5910] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 652.825625][ T5910] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 652.825649][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.988029][ T9180] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 653.041867][ T5910] usb 4-1: USB disconnect, device number 26 [ 653.113336][ T9180] usb 5-1: device descriptor read/64, error -71 [ 653.371899][ T9180] usb usb5-port1: attempt power cycle [ 653.713154][ T9180] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 653.733493][ T9180] usb 5-1: device descriptor read/8, error -71 [ 653.972897][ T9180] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 653.994290][ T9180] usb 5-1: device descriptor read/8, error -71 [ 654.173457][ T9180] usb usb5-port1: unable to enumerate USB device [ 654.285327][T12149] mmap: syz.3.1707 (12149) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 654.406524][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1711'. [ 654.595717][T12149] pim6reg: entered allmulticast mode [ 656.513151][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 656.753227][ T5910] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 656.753372][ T9180] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 656.906828][ T5910] usb 5-1: device descriptor read/64, error -71 [ 656.947561][ T9180] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 656.947592][ T9180] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.947612][ T9180] usb 7-1: config 0 has no interface number 0 [ 656.947657][ T9180] usb 7-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.954442][ T9180] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 656.954472][ T9180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.954491][ T9180] usb 7-1: Product: syz [ 656.954504][ T9180] usb 7-1: Manufacturer: syz [ 656.954516][ T9180] usb 7-1: SerialNumber: syz [ 656.966142][ T9180] usb 7-1: config 0 descriptor?? [ 656.982364][ T9180] yurex 7-1:0.50: Could not find endpoints [ 657.123311][ T9180] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 657.151432][ T5910] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 657.275871][ T9180] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.275894][ T9180] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 657.275915][ T9180] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 657.275927][ T9180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.279118][ T9180] usb 6-1: config 0 descriptor?? [ 657.283203][ T5910] usb 5-1: device descriptor read/64, error -71 [ 657.401111][ T5910] usb usb5-port1: attempt power cycle [ 657.523972][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1726'. [ 657.792954][ T5910] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 657.817678][ T5910] usb 5-1: device descriptor read/8, error -71 [ 658.101247][ T5910] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 658.123563][ T5910] usb 5-1: device descriptor read/8, error -71 [ 658.233371][ T5910] usb usb5-port1: unable to enumerate USB device [ 659.850614][ T5861] usb 6-1: USB disconnect, device number 18 [ 660.010688][ T5910] usb 7-1: USB disconnect, device number 19 [ 660.404995][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1757'. [ 660.405018][T12278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'. [ 660.405036][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1757'. [ 660.405076][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1757'. [ 660.453031][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1759'. [ 660.554619][T12285] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1761'. [ 660.556159][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1762'. [ 660.556206][T12284] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 660.563565][ T5910] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 660.678101][ T37] audit: type=1326 audit(1770588613.101:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12288 comm="syz.5.1764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4c37aeb9 code=0x0 [ 660.692813][ T5910] usb 4-1: device descriptor read/64, error -71 [ 660.723307][ T5861] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 660.877830][ T5861] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.877856][ T5861] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 660.877889][ T5861] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 660.877911][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.893926][ T5861] usb 7-1: config 0 descriptor?? [ 660.932987][ T5910] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 661.162748][ T5910] usb 4-1: device descriptor read/64, error -71 [ 661.273437][ T5910] usb usb4-port1: attempt power cycle [ 661.613861][ T5910] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 661.634382][ T5910] usb 4-1: device descriptor read/8, error -71 [ 661.648225][T12308] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.872903][ T5910] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 661.895044][ T5910] usb 4-1: device descriptor read/8, error -71 [ 662.011389][ T5910] usb usb4-port1: unable to enumerate USB device [ 663.575276][ T5910] usb 7-1: USB disconnect, device number 20 [ 665.054835][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 665.054976][ T5884] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 665.218164][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 665.222052][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.222163][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.222205][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 665.222227][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.227915][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.227943][ T5884] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.227981][ T5884] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 665.228003][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.374537][ T10] usb 4-1: config 0 descriptor?? [ 665.390549][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 665.401893][ T5884] usb 6-1: config 0 descriptor?? [ 665.619486][ T10] usb 4-1: USB disconnect, device number 31 [ 666.480951][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 666.481303][T12395] ------------[ cut here ]------------ [ 666.481313][T12395] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 666.481346][T12395] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2696 at mac80211_hwsim_sta_rc_update+0x696/0x860, CPU#1: syz.4.1800/12395 [ 666.481403][T12395] Modules linked in: [ 666.481438][T12395] CPU: 1 UID: 0 PID: 12395 Comm: syz.4.1800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 666.481467][T12395] Tainted: [L]=SOFTLOCKUP [ 666.481474][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 666.481491][T12395] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 666.481523][T12395] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 d6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 d9 8e 53 fb 90 0f 0b [ 666.481542][T12395] RSP: 0018:ffffc9001c8deec0 EFLAGS: 00010283 [ 666.481559][T12395] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff88806de5d280 [ 666.481574][T12395] RDX: 0000000000000000 RSI: ffff88802ffa75e2 RDI: ffffffff8f53aa90 [ 666.481588][T12395] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 666.481601][T12395] R10: 0000000000000100 R11: 000000000000000d R12: 0000000000000000 [ 666.481620][T12395] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 666.481634][T12395] FS: 00007f2e188ae6c0(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 666.481652][T12395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.481667][T12395] CR2: 0000200000001080 CR3: 0000000028244000 CR4: 00000000003526f0 [ 666.481685][T12395] Call Trace: [ 666.481693][T12395] [ 666.481712][T12395] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 666.481745][T12395] mac80211_hwsim_sta_add+0xa4/0x350 [ 666.481774][T12395] drv_sta_state+0x86a/0x1760 [ 666.481805][T12395] sta_info_insert_rcu+0x1712/0x2760 [ 666.481832][T12395] ? sta_info_insert_rcu+0x2d2/0x2760 [ 666.481872][T12395] ? ieee80211_add_station+0x4f1/0x6a0 [ 666.481900][T12395] sta_info_insert+0x16/0xc0 [ 666.481923][T12395] rdev_add_station+0xfc/0x270 [ 666.481951][T12395] nl80211_new_station+0x1860/0x1c70 [ 666.481990][T12395] ? __pfx_nl80211_new_station+0x10/0x10 [ 666.482009][T12395] ? netdev_run_todo+0xd5c/0xde0 [ 666.482058][T12395] ? nl80211_pre_doit+0x4f1/0x930 [ 666.482082][T12395] genl_family_rcv_msg_doit+0x22a/0x330 [ 666.482109][T12395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 666.482130][T12395] ? rcu_is_watching+0x15/0xb0 [ 666.482171][T12395] ? bpf_lsm_capable+0x9/0x20 [ 666.482192][T12395] ? security_capable+0x7e/0x2c0 [ 666.482219][T12395] genl_rcv_msg+0x61c/0x7a0 [ 666.482246][T12395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.482265][T12395] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 666.482283][T12395] ? __pfx_nl80211_new_station+0x10/0x10 [ 666.482302][T12395] ? __pfx_nl80211_post_doit+0x10/0x10 [ 666.482321][T12395] ? __pfx_ref_tracker_free+0x10/0x10 [ 666.482343][T12395] ? __skb_clone+0x63/0x7a0 [ 666.482371][T12395] netlink_rcv_skb+0x232/0x4b0 [ 666.482399][T12395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.482421][T12395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.482462][T12395] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.482488][T12395] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.482518][T12395] genl_rcv+0x28/0x40 [ 666.482537][T12395] netlink_unicast+0x831/0x9f0 [ 666.482570][T12395] ? __pfx_netlink_unicast+0x10/0x10 [ 666.482650][T12395] ? __alloc_skb+0x193/0x390 [ 666.482678][T12395] ? netlink_sendmsg+0x650/0xb40 [ 666.482701][T12395] ? skb_put+0x11b/0x210 [ 666.482723][T12395] netlink_sendmsg+0x813/0xb40 [ 666.482758][T12395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.482792][T12395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.482823][T12395] ____sys_sendmsg+0xa4e/0xac0 [ 666.482845][T12395] ? __might_fault+0xaf/0x130 [ 666.482880][T12395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.482910][T12395] ? import_iovec+0x73/0xa0 [ 666.482940][T12395] ___sys_sendmsg+0x2a5/0x360 [ 666.482960][T12395] ? __lock_acquire+0x6b5/0x2cf0 [ 666.482986][T12395] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.483016][T12395] ? futex_wake+0x4af/0x580 [ 666.483068][T12395] ? __fget_files+0x2a/0x420 [ 666.483087][T12395] ? __fget_files+0x3a6/0x420 [ 666.483116][T12395] __x64_sys_sendmsg+0x1c3/0x2a0 [ 666.483140][T12395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.483170][T12395] ? rcu_is_watching+0x15/0xb0 [ 666.483205][T12395] do_syscall_64+0xe2/0xf80 [ 666.483230][T12395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.483248][T12395] ? trace_irq_disable+0x37/0x100 [ 666.483273][T12395] ? clear_bhb_loop+0x60/0xb0 [ 666.483296][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.483315][T12395] RIP: 0033:0x7f2e1a65aeb9 [ 666.483344][T12395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.483363][T12395] RSP: 002b:00007f2e188ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.483384][T12395] RAX: ffffffffffffffda RBX: 00007f2e1a8d5fa0 RCX: 00007f2e1a65aeb9 [ 666.483400][T12395] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 666.483413][T12395] RBP: 00007f2e1a6c8c1f R08: 0000000000000000 R09: 0000000000000000 [ 666.483426][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.483439][T12395] R13: 00007f2e1a8d6038 R14: 00007f2e1a8d5fa0 R15: 00007fff09e29908 [ 666.483473][T12395] [ 666.483488][T12395] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 666.483506][T12395] CPU: 1 UID: 0 PID: 12395 Comm: syz.4.1800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 666.483535][T12395] Tainted: [L]=SOFTLOCKUP [ 666.483543][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 666.483555][T12395] Call Trace: [ 666.483564][T12395] [ 666.483571][T12395] vpanic+0x1e0/0x670 [ 666.483603][T12395] panic+0xc5/0xd0 [ 666.483635][T12395] ? __pfx_panic+0x10/0x10 [ 666.483678][T12395] __warn+0x315/0x4a0 [ 666.483704][T12395] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 666.483733][T12395] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 666.483759][T12395] __report_bug+0x29a/0x540 [ 666.483791][T12395] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 666.483817][T12395] ? __pfx___report_bug+0x10/0x10 [ 666.483853][T12395] ? kasan_save_track+0x4f/0x80 [ 666.483877][T12395] ? __kasan_kmalloc+0x93/0xb0 [ 666.483902][T12395] ? __kmalloc_cache_noprof+0x1f2/0x6b0 [ 666.483927][T12395] ? sta_info_insert_rcu+0x70f/0x2760 [ 666.483950][T12395] ? sta_info_insert+0x16/0xc0 [ 666.483972][T12395] ? rdev_add_station+0xfc/0x270 [ 666.483998][T12395] report_bug_entry+0x19a/0x290 [ 666.484025][T12395] ? mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 666.484048][T12395] ? mac80211_hwsim_sta_rc_update+0x6f9/0x860 [ 666.484072][T12395] handle_bug+0xca/0x200 [ 666.484101][T12395] exc_invalid_op+0x1a/0x50 [ 666.484129][T12395] asm_exc_invalid_op+0x1a/0x20 [ 666.484149][T12395] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 666.484174][T12395] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 d6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 d9 8e 53 fb 90 0f 0b [ 666.484192][T12395] RSP: 0018:ffffc9001c8deec0 EFLAGS: 00010283 [ 666.484210][T12395] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff88806de5d280 [ 666.484225][T12395] RDX: 0000000000000000 RSI: ffff88802ffa75e2 RDI: ffffffff8f53aa90 [ 666.484239][T12395] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 666.484252][T12395] R10: 0000000000000100 R11: 000000000000000d R12: 0000000000000000 [ 666.484263][T12395] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 666.484298][T12395] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 666.484327][T12395] mac80211_hwsim_sta_add+0xa4/0x350 [ 666.484353][T12395] drv_sta_state+0x86a/0x1760 [ 666.484382][T12395] sta_info_insert_rcu+0x1712/0x2760 [ 666.484408][T12395] ? sta_info_insert_rcu+0x2d2/0x2760 [ 666.484446][T12395] ? ieee80211_add_station+0x4f1/0x6a0 [ 666.484472][T12395] sta_info_insert+0x16/0xc0 [ 666.484500][T12395] rdev_add_station+0xfc/0x270 [ 666.484523][T12395] nl80211_new_station+0x1860/0x1c70 [ 666.484558][T12395] ? __pfx_nl80211_new_station+0x10/0x10 [ 666.484577][T12395] ? netdev_run_todo+0xd5c/0xde0 [ 666.484632][T12395] ? nl80211_pre_doit+0x4f1/0x930 [ 666.484655][T12395] genl_family_rcv_msg_doit+0x22a/0x330 [ 666.484684][T12395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 666.484704][T12395] ? rcu_is_watching+0x15/0xb0 [ 666.484743][T12395] ? bpf_lsm_capable+0x9/0x20 [ 666.484762][T12395] ? security_capable+0x7e/0x2c0 [ 666.484786][T12395] genl_rcv_msg+0x61c/0x7a0 [ 666.484814][T12395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.484833][T12395] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 666.484851][T12395] ? __pfx_nl80211_new_station+0x10/0x10 [ 666.484871][T12395] ? __pfx_nl80211_post_doit+0x10/0x10 [ 666.484893][T12395] ? __pfx_ref_tracker_free+0x10/0x10 [ 666.484911][T12395] ? __skb_clone+0x63/0x7a0 [ 666.484939][T12395] netlink_rcv_skb+0x232/0x4b0 [ 666.484966][T12395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.484987][T12395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.485028][T12395] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.485054][T12395] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.485083][T12395] genl_rcv+0x28/0x40 [ 666.485101][T12395] netlink_unicast+0x831/0x9f0 [ 666.485133][T12395] ? __pfx_netlink_unicast+0x10/0x10 [ 666.485156][T12395] ? __alloc_skb+0x193/0x390 [ 666.485191][T12395] ? netlink_sendmsg+0x650/0xb40 [ 666.485215][T12395] ? skb_put+0x11b/0x210 [ 666.485239][T12395] netlink_sendmsg+0x813/0xb40 [ 666.485275][T12395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.485308][T12395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.485339][T12395] ____sys_sendmsg+0xa4e/0xac0 [ 666.485360][T12395] ? __might_fault+0xaf/0x130 [ 666.485393][T12395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.485423][T12395] ? import_iovec+0x73/0xa0 [ 666.485449][T12395] ___sys_sendmsg+0x2a5/0x360 [ 666.485467][T12395] ? __lock_acquire+0x6b5/0x2cf0 [ 666.485491][T12395] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.485518][T12395] ? futex_wake+0x4af/0x580 [ 666.485568][T12395] ? __fget_files+0x2a/0x420 [ 666.485586][T12395] ? __fget_files+0x3a6/0x420 [ 666.485622][T12395] __x64_sys_sendmsg+0x1c3/0x2a0 [ 666.485648][T12395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.485680][T12395] ? rcu_is_watching+0x15/0xb0 [ 666.485718][T12395] do_syscall_64+0xe2/0xf80 [ 666.485745][T12395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.485765][T12395] ? trace_irq_disable+0x37/0x100 [ 666.485788][T12395] ? clear_bhb_loop+0x60/0xb0 [ 666.485813][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.485832][T12395] RIP: 0033:0x7f2e1a65aeb9 [ 666.485851][T12395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.485870][T12395] RSP: 002b:00007f2e188ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.485891][T12395] RAX: ffffffffffffffda RBX: 00007f2e1a8d5fa0 RCX: 00007f2e1a65aeb9 [ 666.485906][T12395] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 666.485919][T12395] RBP: 00007f2e1a6c8c1f R08: 0000000000000000 R09: 0000000000000000 [ 666.485932][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.485945][T12395] R13: 00007f2e1a8d6038 R14: 00007f2e1a8d5fa0 R15: 00007fff09e29908 [ 666.485978][T12395] [ 666.486128][T12395] Kernel Offset: disabled