last executing test programs: 28m34.610172631s ago: executing program 3 (id=244): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="5c6389d2270aa72a54278df04825e38ebfd9c4d5964d4fcceb11433661c0ce5e3b9acde51ac5b917f3443ff4f13a47c8fd10c2a2215ced1145bb2aa276c9f39e727ce3c9fd3c74c95c34fd62", 0x4c}], 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000001600), 0x4) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000200)={0x0, 0x7, 0x1}) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 28m32.84783526s ago: executing program 3 (id=249): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 28m32.685172684s ago: executing program 3 (id=251): setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) 28m31.633758058s ago: executing program 3 (id=258): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendfile(r4, r4, 0x0, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000440)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002"], 0x64}, 0x1, 0x0, 0x0, 0x2084}, 0x40110) 28m29.497745315s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 28m29.118901655s ago: executing program 3 (id=267): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200), 0x0) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 28m12.749325498s ago: executing program 32 (id=267): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200), 0x0) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 17m24.275507257s ago: executing program 2 (id=1459): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17m22.355002126s ago: executing program 2 (id=1464): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0x1], 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x8000}, 0x80) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000200)={0x0, 0x7, 0x1}) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvmsg(r2, &(0x7f0000002c00)={&(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000002880)=""/61, 0x3d}, {&(0x7f00000028c0)=""/253, 0xfd}], 0x3, &(0x7f0000002b00)=""/240, 0xf0}, 0x2) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) 17m19.826900607s ago: executing program 2 (id=1466): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) 17m16.164158833s ago: executing program 2 (id=1474): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f000000"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17m16.008935127s ago: executing program 2 (id=1476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 17m13.890540386s ago: executing program 2 (id=1479): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x91}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@local, @multicast1}, &(0x7f0000000400)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0xffffffffffffffc0, 0xde4e, 0x7ff, 0x90b4, 0x9, 0x27], 0x0, 0x2}) 16m57.943661263s ago: executing program 33 (id=1479): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x91}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@local, @multicast1}, &(0x7f0000000400)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0xffffffffffffffc0, 0xde4e, 0x7ff, 0x90b4, 0x9, 0x27], 0x0, 0x2}) 14m32.088880347s ago: executing program 1 (id=1869): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 14m31.936354826s ago: executing program 1 (id=1872): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14m31.62746307s ago: executing program 1 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 14m29.157419178s ago: executing program 1 (id=1879): syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timerfd_create(0x9, 0x800) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(0x0, 0x0, 0x83) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$AUDIT_SET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x3c, 0x3e9, 0x8, 0x70bd25, 0x25dfdbff, {0x28, 0x1, 0x0, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0xfffff001, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getdents64(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 14m24.08660002s ago: executing program 1 (id=1898): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14m22.286087069s ago: executing program 1 (id=1905): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}}], 0x1, 0xc015) 14m6.974235751s ago: executing program 34 (id=1905): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}}], 0x1, 0xc015) 31.538552211s ago: executing program 7 (id=4906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @private1, 0x4}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 31.427340543s ago: executing program 7 (id=4908): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x70, @string={0x70, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3f"}}, &(0x7f0000000400)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x0, "a432a184"}, @global=@item_012={0x0, 0x1, 0xf}, @local=@item_4={0x3, 0x2, 0x0, "4a8e693b"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x0, 0xc, 0x6b, "ff06b79759e8eac970f17c6874af30b60f5dea268e5b74a7aa9d788ae091c71c80d09fd3b049176f33f4cdd96be18dea78e64590bd00e11a48a9295c8b51ec4b7257c9dd5b057ca347e53d659ad5a7f479b58e2af53e1f4f41694307e52f71f1355507e63a4c131c1496fa"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000740)={0x20, 0x1, 0x38, "5c65384872b72263760a08ec524da4c53a5102f87ed3a19534a67d46490fce44d8f4504d04011481290f99e10a5eeba1798bd8c50760c2a6"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x9b}}) r4 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640), 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r4, 0xb) 30.363723452s ago: executing program 7 (id=4910): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x4, 0xffffffffd24b2432, 0x83, 0xffff, 0x80000, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x22c}], 0x1}, 0x84) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000040)="220eb6491e033190128583d6fd69aec137072200802a318ff09fc74459bc0b060dc1b3", 0x23}, {&(0x7f0000000080)="76e8d6773582fc8116a2960d56c0cecefc03c6130e4debb06986d476ef07e57a172d4cf38d8213c168ed1b983799c7577b53bfaed72bbcfd81ea3ee24f124e0cb294ecee0dbb067a4f24bf95a19fef44c61719738594593e3d0059ee7b05dec7234d061d8009e1a55789", 0x6a}, {&(0x7f0000000100)="4fb5c215db43479ff6d2bca22e2032bdf34a9de7f0123a5545123afeb4a7089c8dd15e921959bea44ed8494b4c007705f7f64983e81016ae2af1fe0e95647f69db0e96790b22063e260486f45322650fa56eee0232e1bb61510d701ee7ab05be9ee0e7f97b19464fdce85c3851b3", 0x6e}], 0x3, 0x4, 0x1ff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x1, 0x40, 0xffff, 0xa0ea, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x66, 0x0, 0xf7, 0x2d, 0x0, @private=0xa010102, @multicast1}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="28bc4793f6de298c6748ca08a26dd701000600508bcf", 0x16}, 0x1, 0x0, 0x0, 0x4005044}, 0x4048050) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) add_key(&(0x7f0000000200)='.dead\x00', 0x0, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{}, {}]}) keyctl$set_timeout(0xf, 0x0, 0x400) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000000000)=0x5, 0x4) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff7, 0xc) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) 30.289072826s ago: executing program 7 (id=4913): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d040000005a90f57f07703aefeef64ebbee07962c", 0x18}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x20, 0x11, 0x5d, {0x5d, 0x4, "d005bb4b4dc1642c1dfc1946bfb25fd5850b49ded02fa261d27147866588c2afc93fcd32220f700aa3f42f20821733f580d02070180bda85ed6896851396d4d6176665639c7893267bba97f99ca87b734ea5a497ce3d215df6651a"}}, &(0x7f0000000300)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4a7d030ec8154748be563cbdce38113aaf6f70aada4b98e057e40ba028aa848c58e4c6175f7549f3b8bd7d1a9455a2588211a07be98c07f86973e5939fa8d89723b4a68533ac19372e43ef6ecd084475fe7db236474cf523e7d7628da5b989791a322dccfcdb9800b30"}}, &(0x7f0000000400)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x0, "a432a184"}, @global=@item_012={0x0, 0x1, 0xf}, @local=@item_4={0x3, 0x2, 0x0, "4a8e693b"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x0, 0xc, 0x6b, "ff06b79759e8eac970f17c6874af30b60f5dea268e5b74a7aa9d788ae091c71c80d09fd3b049176f33f4cdd96be18dea78e64590bd00e11a48a9295c8b51ec4b7257c9dd5b057ca347e53d659ad5a7f479b58e2af53e1f4f41694307e52f71f1355507e63a4c131c1496fa"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x9b}}) r6 = gettid() r7 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r7, &(0x7f0000004640), 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r6, 0xb) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x66, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 30.062373167s ago: executing program 7 (id=4915): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d040000005a90f57f07703aefeef64ebbee07962c", 0x18}, {0x0}], 0x2) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x20, 0x11, 0x5d, {0x5d, 0x4, "d005bb4b4dc1642c1dfc1946bfb25fd5850b49ded02fa261d27147866588c2afc93fcd32220f700aa3f42f20821733f580d02070180bda85ed6896851396d4d6176665639c7893267bba97f99ca87b734ea5a497ce3d215df6651a"}}, &(0x7f0000000300)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4a7d030ec8154748be563cbdce38113aaf6f70aada4b98e057e40ba028aa848c58e4c6175f7549f3b8bd7d1a9455a2588211a07be98c07f86973e5939fa8d89723b4a68533ac19372e43ef6ecd084475fe7db236474cf523e7d7628da5b989791a322dccfcdb9800b30"}}, &(0x7f0000000400)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x0, "a432a184"}, @global=@item_012={0x0, 0x1, 0xf}, @local=@item_4={0x3, 0x2, 0x0, "4a8e693b"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x0, 0xc, 0x6b, "ff06b79759e8eac970f17c6874af30b60f5dea268e5b74a7aa9d788ae091c71c80d09fd3b049176f33f4cdd96be18dea78e64590bd00e11a48a9295c8b51ec4b7257c9dd5b057ca347e53d659ad5a7f479b58e2af53e1f4f41694307e52f71f1355507e63a4c131c1496fa"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000740)={0x20, 0x1, 0x38, "5c65384872b72263760a08ec524da4c53a5102f87ed3a19534a67d46490fce44d8f4504d04011481290f99e10a5eeba1798bd8c50760c2a6"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x9b}}) r6 = gettid() r7 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r7, &(0x7f0000004640), 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r6, 0xb) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x66, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 29.931453603s ago: executing program 7 (id=4917): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e4571520", 0xad, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.720601758s ago: executing program 0 (id=4996): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 8.334345404s ago: executing program 0 (id=4999): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x24048055) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) getpid() r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) recvfrom$inet6(r2, &(0x7f00000002c0)=""/186, 0xba, 0x40010042, &(0x7f0000000380)={0xa, 0x4e20, 0xdaf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) 6.666934653s ago: executing program 6 (id=5000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x6a, 0x99, {0x1, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250c0000000800", @ANYRES32=r3, @ANYBLOB="e462308449e280a2c8ccea05f27180c2f72c131c4549b4de0435f47ba9cb304b9ded9d8e13cdf9020635966e2f824083a297efbb1497c4b9fe7b"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3", 0x2c}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000844) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.279931905s ago: executing program 4 (id=5001): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f00000000c0)}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.27551513s ago: executing program 6 (id=5004): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2, 0x0, r0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.217674677s ago: executing program 4 (id=5005): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000"], 0x0) 3.598079321s ago: executing program 4 (id=5008): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 3.239485022s ago: executing program 5 (id=5009): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x79, @string={0x79, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4a7d030ec"}}, &(0x7f0000000400)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x0, "a432a184"}, @global=@item_012={0x0, 0x1, 0xf}, @local=@item_4={0x3, 0x2, 0x0, "4a8e693b"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x0, 0xc, 0x6b, "ff06b79759e8eac970f17c6874af30b60f5dea268e5b74a7aa9d788ae091c71c80d09fd3b049176f33f4cdd96be18dea78e64590bd00e11a48a9295c8b51ec4b7257c9dd5b057ca347e53d659ad5a7f479b58e2af53e1f4f41694307e52f71f1355507e63a4c131c1496fa"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000740)={0x20, 0x1, 0x38, "5c65384872b72263760a08ec524da4c53a5102f87ed3a19534a67d46490fce44d8f4504d04011481290f99e10a5eeba1798bd8c50760c2a6"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x9b}}) r4 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640), 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r4, 0xb) 1.72093213s ago: executing program 6 (id=5010): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e4571520", 0xad, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c1", 0x2b}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.472225216s ago: executing program 5 (id=5011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x6a, 0x99, {0x1, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="e462308449e280a2c8ccea05f27180c2f72c131c4549b4de0435f47ba9cb304b9ded9d8e13cdf9020635966e2f824083a297efbb"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}], 0x1, 0x20000844) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.083619163s ago: executing program 0 (id=5012): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f00000006c0)="c98ac921c22e224aa3d9806b4a08446bfa3115401ee02cfa1d49b7b520a6aee0419f78918a44f3a3e8011039c8a5afc50c6469b151bd7a525f0b5d000000000000e2cfeb70bdd1ff08d6a75228d9330ed3182d47b57ec529053f1d1f516863689ceae3737321788049950fb12c503a612300f9061ab565c12f5e13858c44712b11657a84eace551e", 0x88}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) 1.027598048s ago: executing program 5 (id=5013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x6a, 0x99, {0x1, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250c0000000800", @ANYBLOB="e462308449e280a2c8ccea05f27180c2f72c131c4549b4de0435f47ba9cb304b9ded9d8e13cdf9020635966e2f824083a297efbb1497c4b9fe7b19"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3", 0x2c}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000844) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 701.629859ms ago: executing program 0 (id=5014): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f00000000c0)}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 606.644591ms ago: executing program 4 (id=5015): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="10797fc7c826f50526ce5affffff0000009ff07547", 0x15) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000003300)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1) sendmmsg$alg(r1, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)="9c984111ff9f41e939c697cf119617ef39", 0x11}], 0x1, 0x0, 0x0, 0x240088c0}], 0x1, 0x4090) 521.213212ms ago: executing program 6 (id=5016): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841", 0x3a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 520.716156ms ago: executing program 5 (id=5017): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 407.659829ms ago: executing program 4 (id=5018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4880) 381.548076ms ago: executing program 5 (id=5019): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000), 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 342.730298ms ago: executing program 0 (id=5020): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc8", 0x39}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 175.882083ms ago: executing program 6 (id=5021): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c000780180001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 175.5055ms ago: executing program 4 (id=5022): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82", 0x2c, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe18", 0x14}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 124.845698ms ago: executing program 5 (id=5023): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060001000000000200000000000000064a09001009"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 72.384183ms ago: executing program 0 (id=5024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x6a, 0x99, {0x1, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf", @ANYRES32=r3, @ANYBLOB="e462308449e280a2c8ccea05f27180c2f72c131c4549b4de0435f47ba9cb304b9ded9d8e13cdf9020635966e2f824083a297efbb1497c4b9fe7b19"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000844) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 6 (id=5025): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): item tag 0x0 [ 2016.723427][ T5904] wacom 0003:056A:00C5.0009: unknown main item tag 0x0 [ 2016.723451][ T5904] wacom 0003:056A:00C5.0009: unknown main item tag 0x0 [ 2016.723475][ T5904] wacom 0003:056A:00C5.0009: unknown main item tag 0x0 [ 2016.723501][ T5904] wacom 0003:056A:00C5.0009: unknown main item tag 0x0 [ 2016.723526][ T5904] wacom 0003:056A:00C5.0009: unknown main item tag 0x0 [ 2016.991988][ T5904] wacom 0003:056A:00C5.0009: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.7-1/input0 [ 2017.024238][ T5904] usb 8-1: USB disconnect, device number 36 [ 2017.316114][T20646] fido_id[20646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2017.721554][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2018.774528][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2018.774713][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2019.031080][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2019.031279][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2019.053118][T20669] ceph: No mds server is up or the cluster is laggy [ 2022.336469][ T8979] libceph: connect (1)[c::]:6789 error -101 [ 2022.336645][ T8979] libceph: mon0 (1)[c::]:6789 connect error [ 2022.575475][T20728] ceph: No mds server is up or the cluster is laggy [ 2022.591273][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2022.591433][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2024.609200][ T5904] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2025.609061][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 2025.626746][T20779] ceph: No mds server is up or the cluster is laggy [ 2025.627232][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2025.627415][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2025.667527][ T5904] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2025.667558][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.742501][ T5904] usb 5-1: config 0 descriptor?? [ 2025.753522][ T5904] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2025.953882][ T5904] gspca_sq930x: reg_r 001f failed -32 [ 2025.953983][ T5904] sq930x 5-1:0.0: probe with driver sq930x failed with error -32 [ 2025.990106][ T5904] usb 5-1: USB disconnect, device number 73 [ 2026.344432][T20229] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2026.389263][T19298] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2026.429965][T20229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2026.431401][T20229] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2026.467157][T20229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2026.468273][T20229] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2026.531829][T20229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2026.546197][T19298] usb 8-1: Using ep0 maxpacket: 16 [ 2026.548520][T19298] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.548572][T19298] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2026.548601][T19298] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2026.548623][T19298] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2026.548647][T19298] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2026.563717][T20229] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2026.609238][T19298] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2026.609269][T19298] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2026.609290][T19298] usb 8-1: Manufacturer: syz [ 2026.654889][T19298] usb 8-1: config 0 descriptor?? [ 2026.776992][T20229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2027.011311][T19298] rc_core: IR keymap rc-hauppauge not found [ 2027.011333][T19298] Registered IR keymap rc-empty [ 2027.011483][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.037219][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.053692][T19298] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2027.083028][T19298] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input78 [ 2027.115320][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.129195][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.149741][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.169141][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.171542][T20229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2027.193112][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.209139][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.229192][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.255695][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.269117][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.289216][T19298] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2027.327603][T19298] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 2027.327626][T19298] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2027.377125][T19298] usb 8-1: USB disconnect, device number 37 [ 2027.410231][T20229] 8021q: adding VLAN 0 to HW filter on device team0 [ 2027.541122][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.541249][ T5663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2028.663906][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.664067][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2029.059178][T18781] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2029.229838][T20857] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4058'. [ 2029.779077][T18781] usb 5-1: Using ep0 maxpacket: 32 [ 2029.781240][T18781] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2029.781281][T18781] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2029.781303][T18781] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2029.781343][T18781] usb 5-1: config 1 has no interface number 0 [ 2029.781400][T18781] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2029.781428][T18781] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2029.781473][T18781] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2029.781498][T18781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.001092][T18781] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2030.205542][T18781] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 2030.376231][T20869] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4069'. [ 2030.463355][ T8979] usb 5-1: USB disconnect, device number 74 [ 2030.474167][ T8979] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2031.646858][T20229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2033.087761][ T8979] libceph: connect (1)[c::]:6789 error -101 [ 2033.087936][ T8979] libceph: mon0 (1)[c::]:6789 connect error [ 2033.107766][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4085'. [ 2033.338566][T20229] veth0_vlan: entered promiscuous mode [ 2033.342386][ T8979] libceph: connect (1)[c::]:6789 error -101 [ 2033.344194][ T8979] libceph: mon0 (1)[c::]:6789 connect error [ 2033.438398][T20229] veth1_vlan: entered promiscuous mode [ 2033.556517][T20229] veth0_macvtap: entered promiscuous mode [ 2033.566869][T20941] ceph: No mds server is up or the cluster is laggy [ 2033.584921][T20229] veth1_macvtap: entered promiscuous mode [ 2033.644093][T20229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2033.658838][T20229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2033.934876][ T5665] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2034.082208][T12078] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2034.511631][T18781] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 2035.124029][T18781] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2035.124057][T18781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.124076][T18781] usb 5-1: Product: syz [ 2035.124089][T18781] usb 5-1: Manufacturer: syz [ 2035.124102][T18781] usb 5-1: SerialNumber: syz [ 2035.195750][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.196124][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.324427][T18781] usb 5-1: config 0 descriptor?? [ 2035.558795][T18781] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2036.174651][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2036.174670][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2036.590197][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 2036.590589][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 2036.590793][T18781] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2036.641638][T18781] usb 5-1: USB disconnect, device number 75 [ 2036.791144][ T5665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2036.791165][ T5665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2036.841938][T14253] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2036.999156][T14253] usb 1-1: Using ep0 maxpacket: 8 [ 2037.003081][T14253] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2037.024309][T14253] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2037.024338][T14253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.024360][T14253] usb 1-1: Product: syz [ 2037.024375][T14253] usb 1-1: Manufacturer: syz [ 2037.024390][T14253] usb 1-1: SerialNumber: syz [ 2037.092433][T14253] usb 1-1: config 0 descriptor?? [ 2037.309197][ T5904] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2037.581207][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.581735][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.425651][T12298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2038.505531][T12298] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2038.516047][T12298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2038.535472][T12298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2038.542427][T12298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2038.544322][ T5904] usb 8-1: Using ep0 maxpacket: 16 [ 2038.564829][ T5904] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2038.564880][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2038.564907][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2038.564929][ T5904] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2038.564950][ T5904] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2038.568710][ T5904] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2038.568737][ T5904] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2038.568757][ T5904] usb 8-1: Manufacturer: syz [ 2038.694915][ T5904] usb 8-1: config 0 descriptor?? [ 2039.149687][ T5904] rc_core: IR keymap rc-hauppauge not found [ 2039.149709][ T5904] Registered IR keymap rc-empty [ 2039.149860][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.171844][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.250938][ T5904] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2039.270915][T14253] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2039.288532][ T5904] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input79 [ 2039.346343][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.367695][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.392078][ C0] rc rc0: IR event FIFO is full! [ 2039.392093][ C0] rc rc0: IR event FIFO is full! [ 2039.392103][ C0] rc rc0: IR event FIFO is full! [ 2039.392113][ C0] rc rc0: IR event FIFO is full! [ 2039.392122][ C0] rc rc0: IR event FIFO is full! [ 2039.392132][ C0] rc rc0: IR event FIFO is full! [ 2039.392328][ C0] rc rc0: IR event FIFO is full! [ 2039.392338][ C0] rc rc0: IR event FIFO is full! [ 2039.392350][ C0] rc rc0: IR event FIFO is full! [ 2039.392360][ C0] rc rc0: IR event FIFO is full! [ 2039.392369][ C0] rc rc0: IR event FIFO is full! [ 2039.392379][ C0] rc rc0: IR event FIFO is full! [ 2039.392572][ C0] rc rc0: IR event FIFO is full! [ 2039.392584][ C0] rc rc0: IR event FIFO is full! [ 2039.392593][ C0] rc rc0: IR event FIFO is full! [ 2039.392603][ C0] rc rc0: IR event FIFO is full! [ 2039.392613][ C0] rc rc0: IR event FIFO is full! [ 2039.392622][ C0] rc rc0: IR event FIFO is full! [ 2039.393033][ C0] rc rc0: IR event FIFO is full! [ 2039.393056][ C0] rc rc0: IR event FIFO is full! [ 2039.393065][ C0] rc rc0: IR event FIFO is full! [ 2039.393075][ C0] rc rc0: IR event FIFO is full! [ 2039.393084][ C0] rc rc0: IR event FIFO is full! [ 2039.393093][ C0] rc rc0: IR event FIFO is full! [ 2039.393282][ C0] rc rc0: IR event FIFO is full! [ 2039.393292][ C0] rc rc0: IR event FIFO is full! [ 2039.393301][ C0] rc rc0: IR event FIFO is full! [ 2039.393310][ C0] rc rc0: IR event FIFO is full! [ 2039.393319][ C0] rc rc0: IR event FIFO is full! [ 2039.393328][ C0] rc rc0: IR event FIFO is full! [ 2039.393337][ C0] rc rc0: IR event FIFO is full! [ 2039.393349][ C0] rc rc0: IR event FIFO is full! [ 2039.393358][ C0] rc rc0: IR event FIFO is full! [ 2039.393367][ C0] rc rc0: IR event FIFO is full! [ 2039.393559][ C0] rc rc0: IR event FIFO is full! [ 2039.393569][ C0] rc rc0: IR event FIFO is full! [ 2039.393578][ C0] rc rc0: IR event FIFO is full! [ 2039.393969][ C0] rc rc0: IR event FIFO is full! [ 2039.393979][ C0] rc rc0: IR event FIFO is full! [ 2039.393989][ C0] rc rc0: IR event FIFO is full! [ 2039.393998][ C0] rc rc0: IR event FIFO is full! [ 2039.394212][ C0] rc rc0: IR event FIFO is full! [ 2039.394223][ C0] rc rc0: IR event FIFO is full! [ 2039.394232][ C0] rc rc0: IR event FIFO is full! [ 2039.394241][ C0] rc rc0: IR event FIFO is full! [ 2039.394432][ C0] rc rc0: IR event FIFO is full! [ 2039.394442][ C0] rc rc0: IR event FIFO is full! [ 2039.394451][ C0] rc rc0: IR event FIFO is full! [ 2039.394460][ C0] rc rc0: IR event FIFO is full! [ 2039.394469][ C0] rc rc0: IR event FIFO is full! [ 2039.394478][ C0] rc rc0: IR event FIFO is full! [ 2039.394487][ C0] rc rc0: IR event FIFO is full! [ 2039.394868][ C0] rc rc0: IR event FIFO is full! [ 2039.394878][ C0] rc rc0: IR event FIFO is full! [ 2039.394887][ C0] rc rc0: IR event FIFO is full! [ 2039.394897][ C0] rc rc0: IR event FIFO is full! [ 2039.394906][ C0] rc rc0: IR event FIFO is full! [ 2039.394915][ C0] rc rc0: IR event FIFO is full! [ 2039.394924][ C0] rc rc0: IR event FIFO is full! [ 2039.395112][ C0] rc rc0: IR event FIFO is full! [ 2039.395123][ C0] rc rc0: IR event FIFO is full! [ 2039.395132][ C0] rc rc0: IR event FIFO is full! [ 2039.395141][ C0] rc rc0: IR event FIFO is full! [ 2039.395150][ C0] rc rc0: IR event FIFO is full! [ 2039.395181][ C0] rc rc0: IR event FIFO is full! [ 2039.395388][ C0] rc rc0: IR event FIFO is full! [ 2039.395399][ C0] rc rc0: IR event FIFO is full! [ 2039.395591][ C0] rc rc0: IR event FIFO is full! [ 2039.395601][ C0] rc rc0: IR event FIFO is full! [ 2039.395611][ C0] rc rc0: IR event FIFO is full! [ 2039.395621][ C0] rc rc0: IR event FIFO is full! [ 2039.395630][ C0] rc rc0: IR event FIFO is full! [ 2039.395818][ C0] rc rc0: IR event FIFO is full! [ 2039.395828][ C0] rc rc0: IR event FIFO is full! [ 2039.395837][ C0] rc rc0: IR event FIFO is full! [ 2039.395853][ C0] rc rc0: IR event FIFO is full! [ 2039.395861][ C0] rc rc0: IR event FIFO is full! [ 2039.395871][ C0] rc rc0: IR event FIFO is full! [ 2039.395981][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.396061][ C0] rc rc0: IR event FIFO is full! [ 2039.396468][ C0] rc rc0: IR event FIFO is full! [ 2039.396479][ C0] rc rc0: IR event FIFO is full! [ 2039.396488][ C0] rc rc0: IR event FIFO is full! [ 2039.396499][ C0] rc rc0: IR event FIFO is full! [ 2039.396711][ C0] rc rc0: IR event FIFO is full! [ 2039.396722][ C0] rc rc0: IR event FIFO is full! [ 2039.396731][ C0] rc rc0: IR event FIFO is full! [ 2039.396741][ C0] rc rc0: IR event FIFO is full! [ 2039.396936][ C0] rc rc0: IR event FIFO is full! [ 2039.396947][ C0] rc rc0: IR event FIFO is full! [ 2039.396956][ C0] rc rc0: IR event FIFO is full! [ 2039.396966][ C0] rc rc0: IR event FIFO is full! [ 2039.397164][ C0] rc rc0: IR event FIFO is full! [ 2039.397175][ C0] rc rc0: IR event FIFO is full! [ 2039.397413][ C0] rc rc0: IR event FIFO is full! [ 2039.397866][ C0] rc rc0: IR event FIFO is full! [ 2039.398060][ C0] rc rc0: IR event FIFO is full! [ 2039.398070][ C0] rc rc0: IR event FIFO is full! [ 2039.398080][ C0] rc rc0: IR event FIFO is full! [ 2039.398090][ C0] rc rc0: IR event FIFO is full! [ 2039.398283][ C0] rc rc0: IR event FIFO is full! [ 2039.398293][ C0] rc rc0: IR event FIFO is full! [ 2039.398521][ C0] rc rc0: IR event FIFO is full! [ 2039.398540][ C0] rc rc0: IR event FIFO is full! [ 2039.398549][ C0] rc rc0: IR event FIFO is full! [ 2039.398958][ C0] rc rc0: IR event FIFO is full! [ 2039.399029][ C0] rc rc0: IR event FIFO is full! [ 2039.399038][ C0] rc rc0: IR event FIFO is full! [ 2039.399047][ C0] rc rc0: IR event FIFO is full! [ 2039.399056][ C0] rc rc0: IR event FIFO is full! [ 2039.399441][ C0] rc rc0: IR event FIFO is full! [ 2039.399489][ C0] rc rc0: IR event FIFO is full! [ 2039.399522][ C0] rc rc0: IR event FIFO is full! [ 2039.399561][ C0] rc rc0: IR event FIFO is full! [ 2039.399608][ C0] rc rc0: IR event FIFO is full! [ 2039.399969][ C0] rc rc0: IR event FIFO is full! [ 2039.400003][ C0] rc rc0: IR event FIFO is full! [ 2039.400043][ C0] rc rc0: IR event FIFO is full! [ 2039.400081][ C0] rc rc0: IR event FIFO is full! [ 2039.400114][ C0] rc rc0: IR event FIFO is full! [ 2039.400154][ C0] rc rc0: IR event FIFO is full! [ 2039.400175][ C0] rc rc0: IR event FIFO is full! [ 2039.400190][ C0] rc rc0: IR event FIFO is full! [ 2039.400203][ C0] rc rc0: IR event FIFO is full! [ 2039.404418][ C0] rc rc0: IR event FIFO is full! [ 2039.404467][ C0] rc rc0: IR event FIFO is full! [ 2039.404506][ C0] rc rc0: IR event FIFO is full! [ 2039.404538][ C0] rc rc0: IR event FIFO is full! [ 2039.404578][ C0] rc rc0: IR event FIFO is full! [ 2039.404616][ C0] rc rc0: IR event FIFO is full! [ 2039.404648][ C0] rc rc0: IR event FIFO is full! [ 2039.404686][ C0] rc rc0: IR event FIFO is full! [ 2039.405080][ C0] rc rc0: IR event FIFO is full! [ 2039.405120][ C0] rc rc0: IR event FIFO is full! [ 2039.405152][ C0] rc rc0: IR event FIFO is full! [ 2039.405191][ C0] rc rc0: IR event FIFO is full! [ 2039.405232][ C0] rc rc0: IR event FIFO is full! [ 2039.405839][ C0] rc rc0: IR event FIFO is full! [ 2039.405863][ C0] rc rc0: IR event FIFO is full! [ 2039.405878][ C0] rc rc0: IR event FIFO is full! [ 2039.405913][ C0] rc rc0: IR event FIFO is full! [ 2039.406222][ C0] rc rc0: IR event FIFO is full! [ 2039.421324][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.429076][T14253] usb 5-1: Using ep0 maxpacket: 32 [ 2039.439933][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.459803][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.482261][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.482273][T14253] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2039.482329][T14253] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2039.482373][T14253] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2039.482407][T14253] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2039.482431][T14253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.487997][T14253] usb 5-1: config 0 descriptor?? [ 2039.501232][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.509149][ T8979] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2039.524206][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.547195][ T5904] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2039.689555][ T8979] usb 7-1: Using ep0 maxpacket: 16 [ 2039.747300][ T8979] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2039.747360][ T8979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2039.747388][ T8979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2039.747409][ T8979] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2039.747431][ T8979] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2039.806247][ T8979] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2039.806276][ T8979] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2039.806296][ T8979] usb 7-1: Manufacturer: syz [ 2040.072877][ T5904] mceusb 8-1:0.0: Registered ⅝ with mce emulator interface version 1 [ 2040.072949][ T5904] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2040.370823][ T8979] usb 7-1: config 0 descriptor?? [ 2040.396747][ T5904] usb 8-1: USB disconnect, device number 38 [ 2040.415454][T14253] wacom 0003:056A:00C5.000A: ignoring exceeding usage max [ 2040.427622][T14253] hid_parser_main: 1 callbacks suppressed [ 2040.427644][T14253] wacom 0003:056A:00C5.000A: unknown main item tag 0x6 [ 2040.427674][T14253] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 2040.427759][T14253] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 2040.427787][T14253] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 2040.427815][T14253] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 2040.427843][T14253] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 2040.427922][T14253] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 2040.427949][T14253] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 2040.454098][T13955] usb 1-1: USB disconnect, device number 71 [ 2040.662692][T14253] wacom 0003:056A:00C5.000A: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0 [ 2040.738563][T14253] usb 5-1: USB disconnect, device number 76 [ 2040.746609][ T8979] rc_core: IR keymap rc-hauppauge not found [ 2040.746627][ T8979] Registered IR keymap rc-empty [ 2040.746774][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2040.767821][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2040.786735][ T8979] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1 [ 2040.800270][ T5646] Bluetooth: hci3: command tx timeout [ 2040.832326][ T8979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input83 [ 2040.934452][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2040.960858][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2040.980707][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2041.009461][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2041.032751][T21054] fido_id[21054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2041.054207][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2041.069156][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2041.090630][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2041.109181][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2041.139197][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2041.159235][ T8979] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2041.193032][ T8979] mceusb 7-1:0.0: Registered ꢒ with mce emulator interface version 1 [ 2041.193055][ T8979] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2041.231338][ T8979] usb 7-1: USB disconnect, device number 19 [ 2042.687219][ T5663] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.829545][ T8979] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2043.008724][ T5646] Bluetooth: hci3: command tx timeout [ 2043.195629][ T8979] usb 8-1: Using ep0 maxpacket: 32 [ 2043.238645][ T8979] usb 8-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2043.238924][ T8979] usb 8-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2043.238976][ T8979] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2043.271531][ T8979] usb 8-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2043.271588][ T8979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.895981][ T8979] usb 8-1: config 0 descriptor?? [ 2044.379293][T21086] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4129'. [ 2044.890942][ T8979] wacom 0003:056A:00C5.000B: ignoring exceeding usage max [ 2044.893771][ T8979] wacom 0003:056A:00C5.000B: unknown main item tag 0x6 [ 2044.893803][ T8979] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 2044.935527][ T8979] wacom 0003:056A:00C5.000B: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.7-1/input0 [ 2044.953366][ T8979] usb 8-1: USB disconnect, device number 39 [ 2045.049443][ T5646] Bluetooth: hci3: command tx timeout [ 2045.207366][T21091] fido_id[21091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2045.409185][ T5767] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2045.446332][ T5663] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.536603][T21094] tipc: Started in network mode [ 2045.536652][T21094] tipc: Node identity 84e, cluster identity 4711 [ 2045.536665][T21094] tipc: Node number set to 2126 [ 2045.591306][ T5767] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2045.592603][ T5767] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 2045.626435][ T5767] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2045.626454][ T5767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.626467][ T5767] usb 7-1: Product: syz [ 2045.626476][ T5767] usb 7-1: Manufacturer: syz [ 2045.626486][ T5767] usb 7-1: SerialNumber: syz [ 2046.899359][ T5767] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2046.915460][ T5767] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2046.915482][ T5767] usb 7-1: 2:1 : invalid channels 0 [ 2046.940071][ T5663] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.055796][ T5767] usb 7-1: USB disconnect, device number 20 [ 2047.119347][ T5646] Bluetooth: hci3: command tx timeout [ 2047.235928][T17720] udevd[17720]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2048.604893][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2048.605109][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2048.704283][ T5663] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.869985][ T8979] libceph: connect (1)[c::]:6789 error -101 [ 2048.870151][ T8979] libceph: mon0 (1)[c::]:6789 connect error [ 2049.067998][T21132] ceph: No mds server is up or the cluster is laggy [ 2049.496062][T21033] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.496248][T21033] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.496407][T21033] bridge_slave_0: entered allmulticast mode [ 2049.521224][T21033] bridge_slave_0: entered promiscuous mode [ 2049.527564][T21033] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.527778][T21033] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.527934][T21033] bridge_slave_1: entered allmulticast mode [ 2049.542559][T21033] bridge_slave_1: entered promiscuous mode [ 2049.796979][T21033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2049.849114][ T5767] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2049.856553][T21157] ceph: No mds server is up or the cluster is laggy [ 2049.857025][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 2049.857221][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 2049.884540][T21033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2050.004425][ T5767] usb 8-1: Using ep0 maxpacket: 32 [ 2050.008144][ T5767] usb 8-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2050.008198][ T5767] usb 8-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2050.008228][ T5767] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2050.008261][ T5767] usb 8-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2050.008285][ T5767] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.086303][ T5767] usb 8-1: config 0 descriptor?? [ 2050.110270][ T5625] libceph: connect (1)[c::]:6789 error -101 [ 2050.110464][ T5625] libceph: mon0 (1)[c::]:6789 connect error [ 2050.199175][ T5904] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2050.367969][ T5904] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2050.367995][ T5904] usb 7-1: config 0 has no interface number 0 [ 2050.371905][ T5904] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2050.371933][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.372014][ T5904] usb 7-1: Product: syz [ 2050.372031][ T5904] usb 7-1: Manufacturer: syz [ 2050.372046][ T5904] usb 7-1: SerialNumber: syz [ 2050.372841][T21033] team0: Port device team_slave_0 added [ 2050.380842][ T5904] usb 7-1: config 0 descriptor?? [ 2050.396585][T21033] team0: Port device team_slave_1 added [ 2050.535061][ T5767] wacom 0003:056A:00C5.000C: ignoring exceeding usage max [ 2050.538917][ T5767] hid_parser_main: 6 callbacks suppressed [ 2050.538938][ T5767] wacom 0003:056A:00C5.000C: unknown main item tag 0x6 [ 2050.559284][ T5767] wacom 0003:056A:00C5.000C: unknown main item tag 0x0 [ 2050.559316][ T5767] wacom 0003:056A:00C5.000C: unknown main item tag 0x0 [ 2050.559396][ T5767] wacom 0003:056A:00C5.000C: unknown main item tag 0x0 [ 2050.559423][ T5767] wacom 0003:056A:00C5.000C: unknown main item tag 0x0 [ 2050.559450][ T5767] wacom 0003:056A:00C5.000C: unknown main item tag 0x0 [ 2050.620139][ T5904] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2050.649740][ T5767] wacom 0003:056A:00C5.000C: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.7-1/input0 [ 2050.741029][ T5767] usb 8-1: USB disconnect, device number 40 [ 2050.830436][ T5904] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2050.831156][ T5904] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2050.831301][ T5904] usb 7-1: media controller created [ 2051.003338][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2051.062073][T21167] fido_id[21167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2051.403221][ T5904] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2051.427847][T21033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2051.427864][T21033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.427891][T21033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2051.624188][T21033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2051.624207][T21033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.624234][T21033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2051.699546][ T5904] usb 7-1: USB disconnect, device number 21 [ 2051.712764][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 2051.731656][T21176] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4155'. [ 2052.260296][ T5663] bridge_slave_1: left allmulticast mode [ 2052.260329][ T5663] bridge_slave_1: left promiscuous mode [ 2052.260594][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.349166][ T5904] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2052.421719][ T5663] bridge_slave_0: left allmulticast mode [ 2052.421847][ T5663] bridge_slave_0: left promiscuous mode [ 2052.422121][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.501310][ T5904] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2052.501428][ T5904] usb 7-1: config 0 has no interface number 0 [ 2052.504092][ T5904] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2052.504120][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.504140][ T5904] usb 7-1: Product: syz [ 2052.504155][ T5904] usb 7-1: Manufacturer: syz [ 2052.504171][ T5904] usb 7-1: SerialNumber: syz [ 2052.557917][ T5904] usb 7-1: config 0 descriptor?? [ 2052.692913][T21192] kvm_intel: kvm [21191]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x100000001 [ 2052.776363][ T5904] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 2052.794480][ T5904] usb 7-1: USB disconnect, device number 22 [ 2053.629250][T18782] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2053.760500][ T5663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2053.779106][T18782] usb 1-1: Using ep0 maxpacket: 32 [ 2053.781511][T18782] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2053.781652][T18782] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2053.781681][T18782] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2053.781719][T18782] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2053.781736][T18782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.809694][T18782] usb 1-1: config 0 descriptor?? [ 2053.899866][ T5663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2053.947830][ T5663] bond0 (unregistering): Released all slaves [ 2053.969425][ T5663] bond1 (unregistering): Released all slaves [ 2054.122292][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4166'. [ 2054.123901][T21205] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4166'. [ 2054.174737][T21033] hsr_slave_0: entered promiscuous mode [ 2054.188750][T21033] hsr_slave_1: entered promiscuous mode [ 2054.204031][T21033] debugfs: 'hsr0' already exists in 'hsr' [ 2054.238662][T21033] Cannot create hsr debugfs directory [ 2054.452643][T18782] wacom 0003:056A:00C5.000D: ignoring exceeding usage max [ 2054.479159][ T5625] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 2054.547046][T18782] wacom 0003:056A:00C5.000D: unknown main item tag 0x6 [ 2054.547083][T18782] wacom 0003:056A:00C5.000D: unknown main item tag 0x0 [ 2054.547111][T18782] wacom 0003:056A:00C5.000D: unknown main item tag 0x0 [ 2054.547139][T18782] wacom 0003:056A:00C5.000D: unknown main item tag 0x0 [ 2054.645182][T18782] wacom 0003:056A:00C5.000D: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 2054.670865][ T5625] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2054.670890][ T5625] usb 8-1: config 0 has no interface number 0 [ 2054.673597][ T5625] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2054.673624][ T5625] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.673644][ T5625] usb 8-1: Product: syz [ 2054.673659][ T5625] usb 8-1: Manufacturer: syz [ 2054.673673][ T5625] usb 8-1: SerialNumber: syz [ 2054.820948][ T5625] usb 8-1: config 0 descriptor?? [ 2054.858204][T18782] usb 1-1: USB disconnect, device number 72 [ 2055.034697][ T5625] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2055.100961][T21219] fido_id[21219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2055.195303][ T5625] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2055.195645][ T5625] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2055.195697][ T5625] usb 8-1: media controller created [ 2055.265901][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2055.419683][ T5625] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2055.614059][ T5625] usb 8-1: USB disconnect, device number 41 [ 2056.229125][ T5625] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2057.289092][ T5625] usb 7-1: Using ep0 maxpacket: 32 [ 2057.296942][ T5625] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2057.296987][ T5625] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2057.297016][ T5625] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2057.297049][ T5625] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2057.297073][ T5625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.351818][T21252] ceph: No mds server is up or the cluster is laggy [ 2057.353273][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2057.353846][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2057.382550][ T5625] usb 7-1: config 0 descriptor?? [ 2057.938367][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 2057.939455][ T5625] usbhid 7-1:0.0: can't add hid device: -71 [ 2057.939567][ T5625] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2057.970684][ T5625] usb 7-1: USB disconnect, device number 23 [ 2058.207683][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2058.801040][ T5663] hsr_slave_0: left promiscuous mode [ 2059.047749][T11952] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2059.081051][ T5663] hsr_slave_1: left promiscuous mode [ 2059.081900][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2059.081922][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2059.130539][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2059.130568][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2059.198992][T21298] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4192'. [ 2059.949069][T11952] usb 7-1: Using ep0 maxpacket: 8 [ 2059.951628][T11952] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.951681][T11952] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2059.951709][T11952] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2059.951733][T11952] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2059.951839][T11952] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2059.951863][T11952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.997756][T11952] usbtmc 7-1:16.0: bulk endpoints not found [ 2060.157607][ T5663] veth1_macvtap: left promiscuous mode [ 2060.157712][ T5663] veth0_macvtap: left promiscuous mode [ 2060.170565][ T5663] veth1_vlan: left promiscuous mode [ 2060.170751][ T5663] veth0_vlan: left promiscuous mode [ 2061.631838][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2061.632017][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2061.794510][T11952] usb 7-1: USB disconnect, device number 24 [ 2061.919508][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2061.919706][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2062.001058][T21314] ceph: No mds server is up or the cluster is laggy [ 2062.129139][T11952] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2062.279155][T11952] usb 7-1: Using ep0 maxpacket: 32 [ 2062.281067][T11952] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2062.281117][T11952] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 2062.282426][T11952] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2062.282451][T11952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2062.282470][T11952] usb 7-1: SerialNumber: syz [ 2062.383238][T11952] cdc_acm 7-1:1.0: skipping garbage [ 2062.383281][T11952] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 2062.383308][T11952] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 2062.383350][T11952] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 2062.570501][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 2062.596422][T14253] usb 7-1: USB disconnect, device number 25 [ 2062.629488][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 2062.842911][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2062.994678][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4200'. [ 2063.015315][T21328] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4200'. [ 2063.270509][ T5625] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2063.419074][ T5625] usb 1-1: Using ep0 maxpacket: 16 [ 2063.472327][ T5625] usb 1-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 2063.472383][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2063.472413][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2063.472436][ T5625] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2063.472460][ T5625] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2063.474215][ T5625] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2063.474243][ T5625] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2063.474264][ T5625] usb 1-1: Manufacturer: syz [ 2063.481748][ T5625] usb 1-1: config 0 descriptor?? [ 2063.869138][ T5625] rc_core: IR keymap rc-hauppauge not found [ 2063.869159][ T5625] Registered IR keymap rc-empty [ 2063.869316][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2063.889354][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2063.916489][ T5625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2063.956068][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93 [ 2063.983703][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.018069][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.031669][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.055199][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.069272][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.089362][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.109389][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.109703][ T5767] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2064.140077][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.161417][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.180197][ T5625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2064.248838][ T5625] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2064.248864][ T5625] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2064.279110][ T5767] usb 7-1: Using ep0 maxpacket: 8 [ 2064.286104][ T5767] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.286158][ T5767] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2064.286183][ T5767] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2064.286206][ T5767] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2064.286247][ T5767] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2064.286269][ T5767] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.441484][ T5625] usb 1-1: USB disconnect, device number 73 [ 2064.474383][ T5767] usbtmc 7-1:16.0: bulk endpoints not found [ 2066.029615][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2066.029797][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2066.040165][T21375] ceph: No mds server is up or the cluster is laggy [ 2066.041808][T13955] libceph: connect (1)[c::]:6789 error -101 [ 2066.042011][T13955] libceph: mon0 (1)[c::]:6789 connect error [ 2066.299986][T13955] libceph: connect (1)[c::]:6789 error -101 [ 2066.300199][T13955] libceph: mon0 (1)[c::]:6789 connect error [ 2066.809526][ T5625] libceph: connect (1)[c::]:6789 error -101 [ 2066.809708][ T5625] libceph: mon0 (1)[c::]:6789 connect error [ 2066.817244][T21376] ceph: No mds server is up or the cluster is laggy [ 2067.129690][T21033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2067.134074][ T5625] usb 7-1: USB disconnect, device number 26 [ 2067.194634][T21033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2067.195713][T21033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2067.287695][T21033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2067.305225][T21033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2067.374803][T21033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2067.388901][T21033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2067.417705][T21033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2067.651512][T21422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4220'. [ 2067.651578][T21422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4220'. [ 2067.692640][T21033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2067.990806][T21033] 8021q: adding VLAN 0 to HW filter on device team0 [ 2068.021505][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.022359][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2068.065447][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.066560][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2068.429313][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2068.429484][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2068.455470][T21428] ceph: No mds server is up or the cluster is laggy [ 2069.029188][ T5625] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2069.179264][ T5625] usb 7-1: Using ep0 maxpacket: 8 [ 2069.181799][ T5625] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2069.181832][ T5625] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2069.181858][ T5625] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2069.181879][ T5625] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2069.181920][ T5625] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2069.181944][ T5625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.191845][ T5625] usbtmc 7-1:16.0: bulk endpoints not found [ 2069.218421][T21033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2069.415432][ T5746] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2069.773775][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 2070.203312][ T5746] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2070.644917][T21471] ceph: No mds server is up or the cluster is laggy [ 2070.666299][ T5746] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2070.666333][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2070.666368][ T5746] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2070.666390][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.668034][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2070.668215][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2070.786644][ T5746] usb 5-1: config 0 descriptor?? [ 2070.986361][T21033] veth0_vlan: entered promiscuous mode [ 2071.017708][T21033] veth1_vlan: entered promiscuous mode [ 2071.047065][T21033] veth0_macvtap: entered promiscuous mode [ 2071.165682][T21033] veth1_macvtap: entered promiscuous mode [ 2071.324465][ T5746] usbhid 5-1:0.0: can't add hid device: -71 [ 2071.328593][ T5746] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2071.357859][ T5746] usb 5-1: USB disconnect, device number 77 [ 2071.383580][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4236'. [ 2071.406483][T21033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2071.411239][T18782] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2071.433735][T21482] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4236'. [ 2071.470549][T21033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2071.492041][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2071.492406][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2071.492449][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2071.492498][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2071.579446][T18782] usb 1-1: Using ep0 maxpacket: 16 [ 2071.582408][T18782] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.582459][T18782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2071.582485][T18782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2071.582506][T18782] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2071.582528][T18782] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2071.583869][T18782] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2071.583897][T18782] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2071.583917][T18782] usb 1-1: Manufacturer: syz [ 2071.673829][T18782] usb 1-1: config 0 descriptor?? [ 2071.951222][T13955] usb 7-1: USB disconnect, device number 27 [ 2072.189159][T18782] rc_core: IR keymap rc-hauppauge not found [ 2072.189180][T18782] Registered IR keymap rc-empty [ 2072.189337][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.219238][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.250912][T18782] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2072.325499][T21490] binder: BINDER_SET_CONTEXT_MGR already set [ 2072.325513][T21490] binder: 21489:21490 ioctl 4018620d 200000004a80 returned -16 [ 2072.407009][T18782] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input94 [ 2072.446708][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.462556][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.479400][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.499743][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.519808][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.540373][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.559377][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.583069][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.610972][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.640234][T18782] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2072.661419][T18782] mceusb 1-1:0.0: Registered 焪 with mce emulator interface version 1 [ 2072.661441][T18782] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2072.756472][T18782] usb 1-1: USB disconnect, device number 74 [ 2073.212788][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.212810][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.452194][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2073.452395][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2073.483177][ T5663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.483191][ T5663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.496230][T21497] ceph: No mds server is up or the cluster is laggy [ 2075.098041][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4246'. [ 2075.111522][T21520] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4246'. [ 2075.369131][T18782] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2076.571739][T18782] usb 6-1: Using ep0 maxpacket: 8 [ 2076.579758][T18782] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2076.579833][T18782] usb 6-1: config 179 has no interface number 0 [ 2076.587656][T18782] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2076.587733][T18782] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2076.587809][T18782] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2076.587870][T18782] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2076.587977][T18782] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2076.596844][T18782] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2076.596939][T18782] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2076.596996][T18782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.669076][ T5625] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 2076.802197][ T5625] usb 7-1: device descriptor read/64, error -71 [ 2077.049986][ T5625] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2077.489401][ T5625] usb 7-1: device descriptor read/64, error -71 [ 2077.619146][ T5625] usb usb7-port1: attempt power cycle [ 2077.653026][T18782] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input95 [ 2077.675608][ T4947] input input95: unable to receive magic message: -71 [ 2077.842135][T18782] usb 6-1: USB disconnect, device number 66 [ 2077.842238][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2078.019140][ T5625] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 2078.039902][ T5625] usb 7-1: device descriptor read/8, error -71 [ 2078.085489][T21551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4260'. [ 2078.099156][T21551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4260'. [ 2078.279353][ T5625] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2078.305238][ T5625] usb 7-1: device descriptor read/8, error -71 [ 2078.414257][ T5625] usb usb7-port1: unable to enumerate USB device [ 2078.686870][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2078.687039][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2078.711176][T21545] ceph: No mds server is up or the cluster is laggy [ 2078.919195][ T5625] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2079.841591][ T5625] usb 8-1: Using ep0 maxpacket: 16 [ 2079.844014][ T5625] usb 8-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 2079.844064][ T5625] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2079.844090][ T5625] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2079.844122][ T5625] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2079.844160][ T5625] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2079.845631][ T5625] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2079.845655][ T5625] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2079.845673][ T5625] usb 8-1: Manufacturer: syz [ 2079.955634][ T5625] usb 8-1: config 0 descriptor?? [ 2080.279215][ T5625] rc_core: IR keymap rc-hauppauge not found [ 2080.279246][ T5625] Registered IR keymap rc-empty [ 2080.279403][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.307838][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.321098][ T5625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2080.324927][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input96 [ 2080.328905][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.369187][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.389538][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.409226][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.429156][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.439658][T18782] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2080.449102][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.469198][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.489403][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.509194][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.529118][ T5625] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 2080.606646][T18782] usb 5-1: Using ep0 maxpacket: 8 [ 2080.611952][T18782] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2080.611977][T18782] usb 5-1: config 179 has no interface number 0 [ 2080.612021][T18782] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2080.612047][T18782] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2080.612074][T18782] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2080.612099][T18782] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2080.612137][T18782] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2080.612162][T18782] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2080.612200][T18782] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2080.612221][T18782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.815157][T18782] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input97 [ 2080.868228][ T5625] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 2080.868251][ T5625] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2080.985611][T21600] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4275'. [ 2081.509389][ T4947] input input97: unable to receive magic message: -110 [ 2081.700965][ T5625] usb 8-1: USB disconnect, device number 42 [ 2081.880457][T18782] usb 5-1: USB disconnect, device number 78 [ 2081.880558][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2082.843184][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2082.843370][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2082.873135][T21609] ceph: No mds server is up or the cluster is laggy [ 2083.099671][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2083.099943][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2083.137194][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2083.137364][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2083.137445][T21615] ceph: No mds server is up or the cluster is laggy [ 2083.779061][T18782] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2083.929198][T18782] usb 5-1: Using ep0 maxpacket: 8 [ 2083.931929][T18782] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2083.931957][T18782] usb 5-1: config 179 has no interface number 0 [ 2083.932004][T18782] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2083.932031][T18782] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2083.932060][T18782] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2083.932088][T18782] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2083.932115][T18782] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2083.932143][T18782] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2083.932178][T18782] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2083.932202][T18782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.110363][T18782] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input98 [ 2084.154670][ T4947] input input98: unable to receive magic message: -110 [ 2084.267007][T19101] input input98: unable to receive magic message: -32 [ 2084.496190][ T5625] usb 5-1: USB disconnect, device number 79 [ 2085.369319][T18782] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2087.141861][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2087.142067][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2087.187240][T21661] ceph: No mds server is up or the cluster is laggy [ 2087.198925][T21675] overlayfs: overlapping lowerdir path [ 2087.219110][T18782] usb 6-1: Using ep0 maxpacket: 32 [ 2087.297223][T18782] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2087.297273][T18782] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2087.297298][T18782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2087.297327][T18782] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2087.297348][T18782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.351189][T18782] usb 6-1: config 0 descriptor?? [ 2087.961114][T18782] wacom 0003:056A:00C5.000E: ignoring exceeding usage max [ 2087.964417][T18782] hid_parser_main: 2 callbacks suppressed [ 2087.964437][T18782] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 2087.964465][T18782] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 2087.964492][T18782] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 2089.684038][T21686] orangefs_mount: mount request failed with -4 [ 2089.748144][T18782] usb 6-1: USB disconnect, device number 67 [ 2091.656918][T21724] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4319'. [ 2092.238013][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4322'. [ 2092.500590][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 2092.500764][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 2092.526210][T21729] ceph: No mds server is up or the cluster is laggy [ 2092.929174][ T5746] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2093.079098][ T5746] usb 6-1: Using ep0 maxpacket: 8 [ 2093.081342][ T5746] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2093.081373][ T5746] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2093.081399][ T5746] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2093.081424][ T5746] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2093.081466][ T5746] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2093.081489][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.324725][ T5746] usb 6-1: usb_control_msg returned -32 [ 2093.324772][ T5746] usbtmc 6-1:16.0: can't read capabilities [ 2093.408179][ T5746] usb 6-1: USB disconnect, device number 68 [ 2095.489852][T21779] orangefs_mount: mount request failed with -4 [ 2097.053647][T21789] ceph: No mds server is up or the cluster is laggy [ 2097.057028][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2097.057202][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2098.888829][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.888903][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.655935][T21832] orangefs_mount: mount request failed with -4 [ 2100.854210][ T5746] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2101.019100][ T5746] usb 6-1: Using ep0 maxpacket: 8 [ 2101.021770][ T5746] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2101.021798][ T5746] usb 6-1: config 179 has no interface number 0 [ 2101.021846][ T5746] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2101.021875][ T5746] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2101.021904][ T5746] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2101.021931][ T5746] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2101.021954][ T5746] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2101.021984][ T5746] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2101.022018][ T5746] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2101.022042][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.160327][ T5746] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input99 [ 2103.481106][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2103.481889][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2103.652950][ T5746] usb 6-1: USB disconnect, device number 69 [ 2103.653052][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2103.749510][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2103.749698][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2103.936689][T21847] ceph: No mds server is up or the cluster is laggy [ 2105.673355][T21884] orangefs_mount: mount request failed with -4 [ 2107.947192][T21897] ceph: No mds server is up or the cluster is laggy [ 2107.947664][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 2107.947840][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 2108.989103][T19298] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2109.075184][T21935] overlay: Unknown parameter '/' [ 2109.109085][ T5746] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2109.139519][T19298] usb 8-1: Using ep0 maxpacket: 8 [ 2109.145794][T19298] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2109.145822][T19298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.145844][T19298] usb 8-1: Product: syz [ 2109.145859][T19298] usb 8-1: Manufacturer: syz [ 2109.145874][T19298] usb 8-1: SerialNumber: syz [ 2109.192113][T19298] usb 8-1: config 0 descriptor?? [ 2109.240771][T19298] gspca_main: se401-2.14.0 probing 047d:5003 [ 2109.259094][ T5746] usb 1-1: Using ep0 maxpacket: 8 [ 2109.261388][ T5746] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2109.261411][ T5746] usb 1-1: config 179 has no interface number 0 [ 2109.261453][ T5746] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2109.261477][ T5746] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2109.261502][ T5746] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2109.261526][ T5746] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2109.261551][ T5746] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2109.261589][ T5746] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2109.261609][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.371170][T21928] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2109.636099][T19298] gspca_se401: Wrong descriptor type [ 2109.719048][ T5625] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2109.841407][T19298] usb 8-1: USB disconnect, device number 43 [ 2109.869129][ T5625] usb 7-1: Using ep0 maxpacket: 32 [ 2109.873951][ T5625] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.874002][ T5625] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 2109.875681][ T5625] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2109.875708][ T5625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2109.875729][ T5625] usb 7-1: SerialNumber: syz [ 2109.976200][ T5767] usb 1-1: USB disconnect, device number 75 [ 2109.976219][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2109.976279][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2110.182566][ T5625] usb 7-1: USB disconnect, device number 32 [ 2110.385745][T21956] binder: 21954:21956 ioctl 4018620d 0 returned -22 [ 2112.968361][T21989] binder: 21988:21989 ioctl c0306201 0 returned -14 [ 2113.108503][T19298] libceph: connect (1)[c::]:6789 error -101 [ 2113.108690][T19298] libceph: mon0 (1)[c::]:6789 connect error [ 2113.144348][T19298] libceph: connect (1)[c::]:6789 error -101 [ 2113.144528][T19298] libceph: mon0 (1)[c::]:6789 connect error [ 2113.289104][ T5767] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2113.399549][T19298] libceph: connect (1)[c::]:6789 error -101 [ 2113.399751][T19298] libceph: mon0 (1)[c::]:6789 connect error [ 2113.439148][ T5767] usb 7-1: Using ep0 maxpacket: 32 [ 2113.442079][ T5767] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.442128][ T5767] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 2113.447274][ T5767] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2113.447300][ T5767] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2113.447320][ T5767] usb 7-1: SerialNumber: syz [ 2113.656619][T22000] binder: 21998:22000 ioctl 4018620d 0 returned -22 [ 2113.765462][T21987] ceph: No mds server is up or the cluster is laggy [ 2113.910539][T13955] libceph: connect (1)[c::]:6789 error -101 [ 2113.911408][T13955] libceph: mon0 (1)[c::]:6789 connect error [ 2114.407408][ T5767] usb 7-1: USB disconnect, device number 33 [ 2115.358468][T22019] ieee802154 phy0 wpan0: encryption failed: -22 [ 2115.872229][T22030] binder: 22027:22030 ioctl c0306201 0 returned -14 [ 2116.420711][T12298] Bluetooth: hci2: command 0x0406 tx timeout [ 2116.788645][T22038] overlayfs: missing 'lowerdir' [ 2118.105522][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2118.105688][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2118.359464][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2118.359648][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2118.594068][T22050] ceph: No mds server is up or the cluster is laggy [ 2118.626527][T22076] binder: 22071:22076 ioctl c0306201 0 returned -14 [ 2119.836903][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2119.837091][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2121.906322][T22118] binder: 22112:22118 ioctl c0306201 0 returned -14 [ 2122.359101][T18781] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2122.389363][ T8979] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2122.572646][ T8979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2122.572680][ T8979] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2122.572713][ T8979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2122.635471][T18781] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 2122.635516][T18781] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 2122.645289][ T8979] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2122.645314][ T8979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.645335][ T8979] usb 5-1: Product: syz [ 2122.679110][ T8979] usb 5-1: Manufacturer: syz [ 2122.679130][ T8979] usb 5-1: SerialNumber: syz [ 2122.715621][T18781] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2122.715651][T18781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.715673][T18781] usb 1-1: Product: syz [ 2122.715689][T18781] usb 1-1: Manufacturer: syz [ 2122.715705][T18781] usb 1-1: SerialNumber: syz [ 2122.933773][ T8979] usb 5-1: config 0 descriptor?? [ 2122.934956][T22123] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2122.935091][T22123] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2122.966784][T18781] usb 1-1: config 0 descriptor?? [ 2122.967434][ T8979] usb 5-1: ucan: probing device on interface #0 [ 2123.121146][T18781] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 2123.177359][ T8979] usb 5-1: ucan: could not read protocol version, ret=27 [ 2123.177385][ T8979] usb 5-1: ucan: probe failed; try to update the device firmware [ 2123.355874][T22140] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4462'. [ 2123.483579][T22143] ieee802154 phy0 wpan0: encryption failed: -22 [ 2123.709095][T18781] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 2123.859046][T18781] usb 7-1: Using ep0 maxpacket: 16 [ 2123.861457][T18781] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2123.862662][T18781] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.862731][T18781] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2123.862769][T18781] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2123.865209][T18781] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 2123.865236][T18781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.865254][T18781] usb 7-1: Product: syz [ 2123.865267][T18781] usb 7-1: Manufacturer: syz [ 2123.865284][T18781] usb 7-1: SerialNumber: syz [ 2124.174611][T18781] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 2124.199552][T18781] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2124.207454][T18781] usb 7-1: 2:1 : no cluster descriptor [ 2124.281250][T18781] usb 7-1: USB disconnect, device number 34 [ 2124.325713][T21947] udevd[21947]: setting owner of /dev/bus/usb/007/034 to uid=0, gid=0 failed: No such file or directory [ 2124.376312][T21947] udevd[21947]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2124.939077][T14253] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2125.080605][T13955] usb 1-1: USB disconnect, device number 76 [ 2125.096209][T14253] usb 6-1: Using ep0 maxpacket: 32 [ 2125.113114][T14253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.113136][T14253] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2125.118381][T14253] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 2125.118408][T14253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.118428][T14253] usb 6-1: Product: syz [ 2125.118441][T14253] usb 6-1: Manufacturer: syz [ 2125.118454][T14253] usb 6-1: SerialNumber: syz [ 2125.219636][T14253] usb 6-1: config 0 descriptor?? [ 2125.302551][T18781] usb 5-1: USB disconnect, device number 80 [ 2125.506384][T14253] snd-usb-6fire 6-1:0.0: unable to receive device firmware state. [ 2125.506469][T14253] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 2125.551828][T14253] usb 6-1: USB disconnect, device number 70 [ 2126.888065][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 2126.888316][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 2127.070188][T22176] ceph: No mds server is up or the cluster is laggy [ 2133.899076][ T5767] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2134.038160][ T37] audit: type=1326 audit(1782878751.039:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22282 comm="syz.6.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bef6bde59 code=0x0 [ 2134.049176][ T5767] usb 1-1: Using ep0 maxpacket: 16 [ 2134.070874][ T5767] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.070948][ T5767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2134.070968][ T5767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2134.070982][ T5767] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2134.070998][ T5767] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2134.072221][ T5767] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2134.072253][ T5767] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2134.072267][ T5767] usb 1-1: Manufacturer: syz [ 2134.107192][ T5767] usb 1-1: config 0 descriptor?? [ 2134.480387][ T5767] rc_core: IR keymap rc-hauppauge not found [ 2134.480407][ T5767] Registered IR keymap rc-empty [ 2134.480573][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.504831][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.524050][ T5767] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2134.546783][ T5767] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input100 [ 2134.574421][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.589522][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.609384][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.629311][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.649995][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.670161][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.689708][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.709983][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.729178][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.749312][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2134.786429][ T5767] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2134.786657][ T5767] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2134.922392][T22306] binder: BINDER_SET_CONTEXT_MGR already set [ 2134.922466][T22306] binder: 22302:22306 ioctl 4018620d 200000004a80 returned -16 [ 2135.007832][ T5767] usb 1-1: USB disconnect, device number 77 [ 2138.566623][ T8979] libceph: connect (1)[c::]:6789 error -101 [ 2138.566822][ T8979] libceph: mon0 (1)[c::]:6789 connect error [ 2138.618299][T22339] ceph: No mds server is up or the cluster is laggy [ 2139.519180][ T5767] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2139.669036][ T5767] usb 1-1: Using ep0 maxpacket: 16 [ 2139.671396][ T5767] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2139.671460][ T5767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2139.671487][ T5767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2139.671507][ T5767] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2139.671530][ T5767] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2139.673938][ T5767] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2139.673964][ T5767] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2139.673983][ T5767] usb 1-1: Manufacturer: syz [ 2139.790104][ T5767] usb 1-1: config 0 descriptor?? [ 2140.339111][ T5767] rc_core: IR keymap rc-hauppauge not found [ 2140.339131][ T5767] Registered IR keymap rc-empty [ 2140.339268][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.359126][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.380783][ T5767] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2140.412761][ T5767] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input101 [ 2140.553540][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.569616][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.590646][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.611800][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.629461][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.649203][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.669288][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.689164][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.709209][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.729345][ T5767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2140.764754][ T5767] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 2140.764781][ T5767] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2140.852221][ T5767] usb 1-1: USB disconnect, device number 78 [ 2141.309102][ T5625] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2141.459047][ T5625] usb 6-1: Using ep0 maxpacket: 16 [ 2141.461920][ T5625] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.461968][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2141.462011][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2141.462033][ T5625] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2141.462056][ T5625] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2141.463575][ T5625] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2141.463620][ T5625] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2141.463640][ T5625] usb 6-1: Manufacturer: syz [ 2141.578081][ T5625] usb 6-1: config 0 descriptor?? [ 2141.970289][ T5625] rc_core: IR keymap rc-hauppauge not found [ 2141.970309][ T5625] Registered IR keymap rc-empty [ 2141.971394][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2141.989128][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.016144][ T5625] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 2142.039688][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input102 [ 2142.651529][ T8979] libceph: connect (1)[c::]:6789 error -101 [ 2142.651772][ T8979] libceph: mon0 (1)[c::]:6789 connect error [ 2142.652265][ T8979] libceph: connect (1)[c::]:6789 error -101 [ 2142.652796][ T8979] libceph: mon0 (1)[c::]:6789 connect error [ 2142.675105][T22381] ceph: No mds server is up or the cluster is laggy [ 2142.704639][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.727921][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.741222][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.759121][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.766591][T22348] orangefs_mount: mount request failed with -4 [ 2142.782761][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.799256][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.850636][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.869114][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.889265][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.909084][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2142.936513][ T5625] mceusb 6-1:0.0: Registered 焪 with mce emulator interface version 1 [ 2142.936533][ T5625] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2143.010441][ T5625] usb 6-1: USB disconnect, device number 71 [ 2144.999845][T22421] ceph: No mds server is up or the cluster is laggy [ 2145.001869][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2145.002070][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2145.059957][ T5625] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2145.239067][ T5625] usb 6-1: Using ep0 maxpacket: 16 [ 2145.241986][ T5625] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2145.242037][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2145.242065][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2145.242086][ T5625] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2145.242108][ T5625] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2145.243573][ T5625] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2145.243599][ T5625] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2145.243620][ T5625] usb 6-1: Manufacturer: syz [ 2145.272180][ T5625] usb 6-1: config 0 descriptor?? [ 2145.755071][ T5625] rc_core: IR keymap rc-hauppauge not found [ 2145.755094][ T5625] Registered IR keymap rc-empty [ 2145.755284][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.769164][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.791175][ T5625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2145.797701][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input103 [ 2145.830513][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.849488][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.869617][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.892178][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.909954][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.929272][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.951076][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.969103][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2145.991200][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2146.009243][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2146.044527][ T5625] mceusb 6-1:0.0: Registered 焪 with mce emulator interface version 1 [ 2146.044550][ T5625] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2146.114013][ T5625] usb 6-1: USB disconnect, device number 72 [ 2146.402145][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2146.402327][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2146.448244][T22435] ceph: No mds server is up or the cluster is laggy [ 2146.748633][T18782] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2146.922804][T18782] usb 7-1: Using ep0 maxpacket: 8 [ 2146.935072][T18782] usb 7-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 2146.935106][T18782] usb 7-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 2146.935258][T18782] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2146.935326][T18782] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.039616][ T5767] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2147.187005][T18782] usb 7-1: USB disconnect, device number 35 [ 2147.189094][ T5767] usb 5-1: Using ep0 maxpacket: 32 [ 2147.196292][ T5767] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2147.218268][ T5767] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2147.218304][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2147.218324][ T5767] usb 5-1: Product: syz [ 2147.218338][ T5767] usb 5-1: Manufacturer: syz [ 2147.218352][ T5767] usb 5-1: SerialNumber: syz [ 2147.301427][ T5767] usb 5-1: config 0 descriptor?? [ 2147.307534][ T5767] hub 5-1:0.0: bad descriptor, ignoring hub [ 2147.307568][ T5767] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2147.623460][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4573'. [ 2147.744667][T22450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.750293][T22450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.129180][T14253] usb 5-1: USB disconnect, device number 81 [ 2148.375130][T22473] fuse: Unknown parameter 'fd0x0000000000000004' [ 2148.590654][T14253] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 2148.985971][T14253] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2149.257455][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4584'. [ 2149.421052][T14253] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2149.421085][T14253] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2149.421122][T14253] usb 5-1: Product: syz [ 2149.421138][T14253] usb 5-1: Manufacturer: syz [ 2149.421153][T14253] usb 5-1: SerialNumber: syz [ 2149.424450][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2149.424639][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2149.451728][T14253] usb 5-1: config 0 descriptor?? [ 2149.465469][T22479] ceph: No mds server is up or the cluster is laggy [ 2149.494658][T14253] hub 5-1:0.0: bad descriptor, ignoring hub [ 2149.494697][T14253] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2149.830001][T18781] usb 5-1: USB disconnect, device number 82 [ 2150.035027][T14253] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2150.419709][T14253] usb 1-1: device descriptor read/64, error -71 [ 2151.270200][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2151.270373][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2151.309127][T14253] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2151.439150][T14253] usb 1-1: device descriptor read/64, error -71 [ 2151.529539][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2151.531130][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2151.553198][T14253] usb usb1-port1: attempt power cycle [ 2151.750890][T22496] ceph: No mds server is up or the cluster is laggy [ 2152.029104][T14253] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2152.049746][T14253] usb 1-1: device descriptor read/8, error -71 [ 2152.300587][T14253] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2152.330656][T14253] usb 1-1: device descriptor read/8, error -71 [ 2152.449418][T14253] usb usb1-port1: unable to enumerate USB device [ 2152.530593][T22524] syzkaller1: entered promiscuous mode [ 2152.530619][T22524] syzkaller1: entered allmulticast mode [ 2153.750317][T14253] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2153.879257][T14253] usb 5-1: device descriptor read/64, error -71 [ 2154.119057][T14253] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2154.259170][T14253] usb 5-1: device descriptor read/64, error -71 [ 2154.370611][T14253] usb usb5-port1: attempt power cycle [ 2154.710540][T14253] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2154.729795][T14253] usb 5-1: device descriptor read/8, error -71 [ 2154.979079][T14253] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2155.002553][T14253] usb 5-1: device descriptor read/8, error -71 [ 2155.109538][T14253] usb usb5-port1: unable to enumerate USB device [ 2156.042681][T22642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2156.046526][T22642] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2156.176493][T22642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2156.176614][T22642] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2156.286599][T22642] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2157.359970][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 2157.821906][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2157.822090][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2157.959086][T19298] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2158.049079][T13955] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2158.069573][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2158.069782][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2158.109108][T19298] usb 6-1: Using ep0 maxpacket: 16 [ 2158.110788][T19298] usb 6-1: config 0 has an invalid descriptor of length 157, skipping remainder of the config [ 2158.110834][T19298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2158.110858][T19298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2158.110880][T19298] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2158.110895][T19298] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2158.111997][T19298] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2158.112022][T19298] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2158.112041][T19298] usb 6-1: Manufacturer: syz [ 2158.130622][T19298] usb 6-1: config 0 descriptor?? [ 2158.207164][T13955] usb 7-1: Using ep0 maxpacket: 16 [ 2158.220737][T13955] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.220792][T13955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2158.220820][T13955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2158.220843][T13955] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2158.220867][T13955] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2158.224311][T13955] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2158.224332][T13955] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2158.224346][T13955] usb 7-1: Manufacturer: syz [ 2158.249123][ T5646] Bluetooth: hci3: command 0x0c1a tx timeout [ 2158.300543][T22711] ceph: No mds server is up or the cluster is laggy [ 2158.346458][T13955] usb 7-1: config 0 descriptor?? [ 2158.670288][T19298] rc_core: IR keymap rc-hauppauge not found [ 2158.670308][T19298] Registered IR keymap rc-empty [ 2158.670444][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.689106][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.710697][T19298] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2158.714089][T19298] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input104 [ 2158.773847][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.792939][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.810659][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.829132][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.849165][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.869132][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.889091][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.909343][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.929135][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.939083][T13955] rc_core: IR keymap rc-hauppauge not found [ 2158.939100][T13955] Registered IR keymap rc-empty [ 2158.939290][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2158.949235][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2158.959169][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2158.990976][T13955] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1 [ 2158.997613][T19298] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 2158.997636][T19298] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2159.086725][T18781] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2159.122809][T13955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input105 [ 2159.166426][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.179526][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.181509][T14253] usb 6-1: USB disconnect, device number 73 [ 2159.203100][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.219148][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.239133][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.249223][T18781] usb 1-1: Using ep0 maxpacket: 16 [ 2159.252209][T18781] usb 1-1: config 0 has no interfaces? [ 2159.256041][T18781] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2159.256066][T18781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.256086][T18781] usb 1-1: Product: syz [ 2159.256100][T18781] usb 1-1: Manufacturer: syz [ 2159.256126][T18781] usb 1-1: SerialNumber: syz [ 2159.259130][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.280485][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.316315][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.329119][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.349135][T13955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2159.378227][T18781] usb 1-1: config 0 descriptor?? [ 2159.396436][T13955] mceusb 7-1:0.0: Registered 焪 with mce emulator interface version 1 [ 2159.396459][T13955] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2159.439069][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 2159.496074][T13955] usb 7-1: USB disconnect, device number 36 [ 2159.688779][T14253] usb 1-1: USB disconnect, device number 83 [ 2159.926244][T22746] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4697'. [ 2160.322428][ T5646] Bluetooth: hci3: command 0x0c1a tx timeout [ 2160.323194][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.323258][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.119124][ T5625] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2161.269018][ T5625] usb 1-1: Using ep0 maxpacket: 16 [ 2161.273610][ T5625] usb 1-1: config 0 has no interfaces? [ 2161.277792][ T5625] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2161.277824][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.277846][ T5625] usb 1-1: Product: syz [ 2161.277862][ T5625] usb 1-1: Manufacturer: syz [ 2161.277878][ T5625] usb 1-1: SerialNumber: syz [ 2161.335500][ T5625] usb 1-1: config 0 descriptor?? [ 2161.549540][T18781] usb 1-1: USB disconnect, device number 84 [ 2161.869135][T14253] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2162.029093][T14253] usb 5-1: Using ep0 maxpacket: 8 [ 2162.030815][T14253] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2162.030837][T14253] usb 5-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 2162.030855][T14253] usb 5-1: config 179 has no interface number 0 [ 2162.030901][T14253] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2162.030930][T14253] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2162.030959][T14253] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2162.030976][T14253] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2162.030997][T14253] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2162.031012][T14253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.083957][ T5625] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2162.289104][ T5625] usb 6-1: Using ep0 maxpacket: 8 [ 2162.295203][ T5625] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2162.296471][ T5625] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.296510][ T5625] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2162.333794][ T5625] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 2162.333823][ T5625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.333844][ T5625] usb 6-1: Product: syz [ 2162.333860][ T5625] usb 6-1: Manufacturer: syz [ 2162.333874][ T5625] usb 6-1: SerialNumber: syz [ 2162.386947][ T5625] usb 6-1: 0:2 : does not exist [ 2162.401305][T14253] usb 5-1: USB disconnect, device number 87 [ 2162.411459][ T5646] Bluetooth: hci3: command 0x0c1a tx timeout [ 2162.651222][T19298] usb 6-1: USB disconnect, device number 74 [ 2162.869312][ T5625] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2163.019064][ T5625] usb 7-1: Using ep0 maxpacket: 32 [ 2163.022422][ T5625] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2163.022543][ T5625] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2163.022574][ T5625] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.022616][ T5625] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2163.022641][ T5625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.090947][ T5625] usb 7-1: config 0 descriptor?? [ 2164.003974][T22863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2164.531418][T22863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2164.557377][ T5625] wacom 0003:056A:00C5.000F: ignoring exceeding usage max [ 2164.562876][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.562917][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.568483][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.568514][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.568557][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.568597][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.568621][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.568646][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.568670][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.568702][ T5625] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 2164.719311][ T5625] usb 7-1: USB disconnect, device number 37 [ 2165.129072][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 2166.451612][T22922] ceph: No mds server is up or the cluster is laggy [ 2166.455522][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2166.455773][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2166.559956][ T5646] Bluetooth: hci3: command 0x0c1a tx timeout [ 2169.389037][T14253] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2169.549073][T14253] usb 5-1: Using ep0 maxpacket: 32 [ 2169.552202][T14253] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 2169.552249][T14253] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2169.552279][T14253] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2169.552313][T14253] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 2169.552337][T14253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.623302][T14253] usb 5-1: config 0 descriptor?? [ 2170.828834][T14253] wacom 0003:056A:00C5.0010: ignoring exceeding usage max [ 2170.850359][T22981] ceph: No mds server is up or the cluster is laggy [ 2170.858306][T14253] hid_parser_main: 18 callbacks suppressed [ 2170.858327][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858362][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858387][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858412][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858436][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858461][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858486][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858512][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858537][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.858561][T14253] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 2170.929033][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2170.929240][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2171.135658][ T5625] usb 5-1: USB disconnect, device number 88 [ 2173.600712][T19298] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2173.752743][T19298] usb 6-1: Using ep0 maxpacket: 16 [ 2173.754880][T19298] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2173.754930][T19298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2173.754958][T19298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2173.754979][T19298] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2173.755002][T19298] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2173.787458][T19298] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2173.787526][T19298] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2173.787575][T19298] usb 6-1: Manufacturer: syz [ 2173.844468][T19298] usb 6-1: config 0 descriptor?? [ 2173.992610][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'. [ 2174.249032][T19298] rc_core: IR keymap rc-hauppauge not found [ 2174.249051][T19298] Registered IR keymap rc-empty [ 2174.249195][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.270917][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.295271][T19298] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2174.323500][T19298] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input106 [ 2174.349282][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.370443][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.389242][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.410254][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.432607][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.450772][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.471810][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.494902][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.509071][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.529103][T19298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2174.581947][T19298] mceusb 6-1:0.0: Registered 焪 with mce emulator interface version 1 [ 2174.581970][T19298] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2174.658581][T19298] usb 6-1: USB disconnect, device number 75 [ 2175.832591][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4857'. [ 2177.751762][ T5625] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2177.879042][ T5625] usb 1-1: device descriptor read/64, error -71 [ 2178.309093][ T5625] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2178.439076][ T5625] usb 1-1: device descriptor read/64, error -71 [ 2178.549571][ T5625] usb usb1-port1: attempt power cycle [ 2179.525089][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2179.525297][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2179.559088][ T5625] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2179.579848][ T5625] usb 1-1: device descriptor read/8, error -71 [ 2179.977925][T23190] ceph: No mds server is up or the cluster is laggy [ 2179.987383][T18782] libceph: connect (1)[c::]:6789 error -101 [ 2179.987582][T18782] libceph: mon0 (1)[c::]:6789 connect error [ 2181.579184][T13955] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2181.729022][T13955] usb 7-1: Using ep0 maxpacket: 8 [ 2181.732274][T13955] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2181.732301][T13955] usb 7-1: config 179 has an invalid descriptor of length 55, skipping remainder of the config [ 2181.732322][T13955] usb 7-1: config 179 has no interface number 0 [ 2181.732355][T13955] usb 7-1: too many endpoints for config 179 interface 65 altsetting 12: 49, using maximum allowed: 30 [ 2181.732395][T13955] usb 7-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 2181.732424][T13955] usb 7-1: config 179 interface 65 has no altsetting 0 [ 2181.732464][T13955] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2181.732488][T13955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.885992][T13955] usb 7-1: string descriptor 0 read error: -71 [ 2182.895609][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2182.895800][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2182.919193][T13955] usb 7-1: USB disconnect, device number 38 [ 2183.108378][T23245] ceph: No mds server is up or the cluster is laggy [ 2183.789459][T23277] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4919'. [ 2184.000992][T12298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2184.038105][T12298] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2184.046723][T12298] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2184.061899][T12298] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2184.062876][T12298] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2185.741858][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2185.742054][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2185.953124][T23308] ceph: No mds server is up or the cluster is laggy [ 2186.319268][ T5646] Bluetooth: hci5: command tx timeout [ 2187.253658][ T5663] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.464902][T23325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2187.465185][T23325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2187.465366][T23325] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2187.465672][T23325] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2187.624213][T23325] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2188.813586][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2188.813772][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2188.879191][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 2189.037850][ T5663] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.069547][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2189.069724][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2189.145845][T23345] ceph: No mds server is up or the cluster is laggy [ 2189.389087][T19298] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2189.555528][ T5646] Bluetooth: hci5: command 0x040f tx timeout [ 2189.555790][ T5646] Bluetooth: hci3: command 0x0c1a tx timeout [ 2189.572491][T19298] usb 5-1: Using ep0 maxpacket: 16 [ 2189.574536][T19298] usb 5-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 2189.574583][T19298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2189.574610][T19298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2189.574631][T19298] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2189.574653][T19298] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2189.575861][T19298] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2189.575886][T19298] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2189.575905][T19298] usb 5-1: Manufacturer: syz [ 2189.669156][T19298] usb 5-1: config 0 descriptor?? [ 2190.050464][T19298] rc_core: IR keymap rc-hauppauge not found [ 2190.050489][T19298] Registered IR keymap rc-empty [ 2190.050659][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.077327][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.152344][ T5663] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.248549][T19298] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2190.264103][T19298] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input107 [ 2190.284480][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.299442][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.319452][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.341271][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.360335][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.379127][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.399416][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.425238][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.439136][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.459400][T19298] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2190.485820][T19298] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2190.485844][T19298] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2190.574017][T18781] usb 5-1: USB disconnect, device number 89 [ 2190.911709][ T5663] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.414859][T23283] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.435650][T23283] bridge0: port 1(bridge_slave_0) entered disabled state [ 2191.435897][T23283] bridge_slave_0: entered allmulticast mode [ 2191.457312][T23283] bridge_slave_0: entered promiscuous mode [ 2191.478004][T23283] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.478132][T23283] bridge0: port 2(bridge_slave_1) entered disabled state [ 2191.478331][T23283] bridge_slave_1: entered allmulticast mode [ 2191.513433][T23283] bridge_slave_1: entered promiscuous mode [ 2191.599069][T12298] Bluetooth: hci5: command 0x040f tx timeout [ 2192.160497][T23283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2192.636865][T23283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2192.674998][T23419] ceph: No mds server is up or the cluster is laggy [ 2192.906893][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 2192.910826][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 2193.593546][T23283] team0: Port device team_slave_0 added [ 2193.610496][T23283] team0: Port device team_slave_1 added [ 2193.714264][T12298] Bluetooth: hci5: command 0x040f tx timeout [ 2193.918706][T23283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2193.918725][T23283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2193.918754][T23283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2194.043530][T23283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2194.043547][T23283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2194.043572][T23283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2194.641665][ T5663] bridge_slave_1: left allmulticast mode [ 2194.641704][ T5663] bridge_slave_1: left promiscuous mode [ 2194.641959][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2194.828625][ T5663] bridge_slave_0: left allmulticast mode [ 2194.828660][ T5663] bridge_slave_0: left promiscuous mode [ 2194.889770][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.777368][T12298] Bluetooth: hci5: command 0x040f tx timeout [ 2196.655066][ T5663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2197.172059][T23477] ceph: No mds server is up or the cluster is laggy [ 2197.172604][T18781] libceph: connect (1)[c::]:6789 error -101 [ 2197.172807][T18781] libceph: mon0 (1)[c::]:6789 connect error [ 2197.304768][ T5663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2197.352512][ T5663] bond0 (unregistering): Released all slaves [ 2197.477088][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2197.535813][T23283] hsr_slave_0: entered promiscuous mode [ 2197.536953][T23283] hsr_slave_1: entered promiscuous mode [ 2197.546256][T23283] debugfs: 'hsr0' already exists in 'hsr' [ 2197.546279][T23283] Cannot create hsr debugfs directory [ 2197.879192][T12298] Bluetooth: hci5: command 0x040f tx timeout [ 2199.106229][T23497] ceph: No mds server is up or the cluster is laggy [ 2199.106738][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 2199.106916][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 2200.531632][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2201.842333][T23543] ceph: No mds server is up or the cluster is laggy [ 2201.845115][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 2201.845312][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 2203.850570][T23570] binder: 23568:23570 ioctl 4018620d 0 returned -22 [ 2204.337233][ T5663] hsr_slave_0: left promiscuous mode [ 2204.389098][ T5663] hsr_slave_1: left promiscuous mode [ 2204.390055][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2204.390100][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2204.450590][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2204.450617][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2204.656178][ T5663] veth1_macvtap: left promiscuous mode [ 2204.656284][ T5663] veth0_macvtap: left promiscuous mode [ 2204.656511][ T5663] veth1_vlan: left promiscuous mode [ 2204.656674][ T5663] veth0_vlan: left promiscuous mode [ 2206.176518][T23598] ceph: No mds server is up or the cluster is laggy [ 2206.178544][T14253] libceph: connect (1)[c::]:6789 error -101 [ 2206.178699][T14253] libceph: mon0 (1)[c::]:6789 connect error [ 2206.449454][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 2206.449648][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 2207.048648][T23591] process '/newroot/137/file0' started with executable stack [ 2207.729619][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 2207.789673][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 2208.033511][T23596] wlan0 speed is unknown, defaulting to 1000 [ 2208.034853][T23596] wlan0 speed is unknown, defaulting to 1000 [ 2208.467596][T23596] wlan0 speed is unknown, defaulting to 1000 [ 2208.500261][T23596] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2208.500297][T23596] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2208.500336][T23596] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2208.558102][ T5746] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2208.744709][T23596] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2208.826422][T23596] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2208.865371][ T5746] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2208.865418][ T5746] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2208.865440][ T5746] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2208.867677][ T5746] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2208.867705][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.867725][ T5746] usb 5-1: Product: syz [ 2208.867739][ T5746] usb 5-1: Manufacturer: syz [ 2208.867753][ T5746] usb 5-1: SerialNumber: syz [ 2208.883250][ T5746] usb 5-1: config 0 descriptor?? [ 2208.884249][T23624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2208.892739][ T5746] usb 5-1: ucan: probing device on interface #0 [ 2208.892760][ T5746] usb 5-1: ucan: invalid EP count (1) [ 2208.892775][ T5746] usb 5-1: ucan: probe failed; try to update the device firmware [ 2209.107329][ T5746] usb 5-1: USB disconnect, device number 90 [ 2211.440614][T23655] ceph: No mds server is up or the cluster is laggy [ 2211.444342][ T5746] libceph: connect (1)[c::]:6789 error -101 [ 2211.444526][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 2211.504947][T23596] wlan0 speed is unknown, defaulting to 1000 [ 2211.656022][T23596] wlan0 speed is unknown, defaulting to 1000 [ 2211.862752][T23596] wlan0 speed is unknown, defaulting to 1000 [ 2211.886023][T23596] wlan0 speed is unknown, defaulting to 1000 [ 2212.035230][T23596] wlan0 speed is unknown, defaulting to 1000 [ 2212.111886][T23283] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2212.459622][T23283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2212.465180][T23283] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2212.650517][T23283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2212.657913][T23283] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2212.725650][T23283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2212.750310][T23283] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2212.880048][T23283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2213.121704][T23697] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.5016'. [ 2213.387575][T23283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2213.498126][T23283] 8021q: adding VLAN 0 to HW filter on device team0 [ 2213.558797][T23400] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.566591][T23400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2213.627863][T23400] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.628086][T23400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2213.686583][T23384] ------------[ cut here ]------------ [ 2213.686597][T23384] in_task() && kcov_mode_enabled(mode) [ 2213.686613][T23384] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5bb/0x6f0, CPU#1: kworker/u8:23/23384 [ 2213.686674][T23384] Modules linked in: [ 2213.686702][T23384] CPU: 1 UID: 0 PID: 23384 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2213.686730][T23384] Tainted: [L]=SOFTLOCKUP [ 2213.686738][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2213.686752][T23384] Workqueue: events_unbound cfg80211_wiphy_work [ 2213.686776][T23384] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 2213.686802][T23384] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9c 51 e3 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 77 59 62 09 89 c0 48 c7 c7 c0 82 71 [ 2213.686820][T23384] RSP: 0018:ffffc90005c0f9f8 EFLAGS: 00010202 [ 2213.686838][T23384] RAX: 0000000000000000 RBX: ffff8880260ddd00 RCX: 0000000080000001 [ 2213.686853][T23384] RDX: 0000000000000000 RSI: ffffffff8ba94360 RDI: ffffffff8ba94320 [ 2213.686869][T23384] RBP: ffff8880379dac80 R08: ffffffff8b29c9a0 R09: 0000000000000000 [ 2213.686884][T23384] R10: 0000000000000000 R11: ffffffff8dfc2fc0 R12: dffffc0000000000 [ 2213.686900][T23384] R13: ffff88802bffdf58 R14: 0000000000000000 R15: ffff888054af1180 [ 2213.686916][T23384] FS: 0000000000000000(0000) GS:ffff888126211000(0000) knlGS:0000000000000000 [ 2213.686933][T23384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2213.686947][T23384] CR2: 000000110c404018 CR3: 0000000032998000 CR4: 00000000003526f0 [ 2213.686965][T23384] Call Trace: [ 2213.686973][T23384] [ 2213.686994][T23384] ieee80211_iface_work+0x20c/0x1010 [ 2213.687039][T23384] cfg80211_wiphy_work+0x29e/0x420 [ 2213.687063][T23384] ? process_scheduled_works+0xa20/0x14e0 [ 2213.687224][T23384] process_scheduled_works+0xa8e/0x14e0 [ 2213.687290][T23384] ? __pfx_process_scheduled_works+0x10/0x10 [ 2213.687332][T23384] ? assign_work+0x3cf/0x5d0 [ 2213.687369][T23384] worker_thread+0xa47/0xfb0 [ 2213.687439][T23384] kthread+0x388/0x470 [ 2213.687515][T23384] ? __pfx_worker_thread+0x10/0x10 [ 2213.687549][T23384] ? __pfx_kthread+0x10/0x10 [ 2213.687578][T23384] ret_from_fork+0x514/0xb70 [ 2213.687635][T23384] ? __pfx_ret_from_fork+0x10/0x10 [ 2213.687664][T23384] ? __switch_to+0xc89/0x1420 [ 2213.687715][T23384] ? __pfx_kthread+0x10/0x10 [ 2213.687745][T23384] ret_from_fork_asm+0x1a/0x30 [ 2213.687797][T23384] [ 2213.687809][T23384] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2213.687830][T23384] CPU: 1 UID: 0 PID: 23384 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2213.687862][T23384] Tainted: [L]=SOFTLOCKUP [ 2213.687870][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2213.687886][T23384] Workqueue: events_unbound cfg80211_wiphy_work [ 2213.687911][T23384] Call Trace: [ 2213.687920][T23384] [ 2213.687930][T23384] vpanic+0x56c/0xa60 [ 2213.687962][T23384] ? __pfx__printk+0x10/0x10 [ 2213.688007][T23384] ? __pfx_vpanic+0x10/0x10 [ 2213.688035][T23384] ? is_bpf_text_address+0x292/0x2b0 [ 2213.688125][T23384] ? is_bpf_text_address+0x26/0x2b0 [ 2213.688167][T23384] panic+0xc5/0xd0 [ 2213.688196][T23384] ? __pfx_panic+0x10/0x10 [ 2213.688236][T23384] ? ret_from_fork_asm+0x1a/0x30 [ 2213.688274][T23384] __warn+0x315/0x4c0 [ 2213.688304][T23384] ? kcov_remote_start+0x5bb/0x6f0 [ 2213.688333][T23384] ? kcov_remote_start+0x5bb/0x6f0 [ 2213.688360][T23384] __report_bug+0x331/0x530 [ 2213.688428][T23384] ? kcov_remote_start+0x5bb/0x6f0 [ 2213.688457][T23384] ? __pfx___report_bug+0x10/0x10 [ 2213.688508][T23384] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 2213.688564][T23384] ? rt_spin_lock+0x1e0/0x400 [ 2213.688628][T23384] ? rt_spin_lock+0x1e0/0x400 [ 2213.688667][T23384] ? kcov_remote_start+0x5bb/0x6f0 [ 2213.688695][T23384] report_bug+0x16a/0x220 [ 2213.688725][T23384] ? kcov_remote_start+0x5bb/0x6f0 [ 2213.688750][T23384] ? kcov_remote_start+0x5bd/0x6f0 [ 2213.688781][T23384] handle_bug+0x9c/0x200 [ 2213.688814][T23384] exc_invalid_op+0x1a/0x50 [ 2213.688844][T23384] asm_exc_invalid_op+0x1a/0x20 [ 2213.688867][T23384] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 2213.688895][T23384] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9c 51 e3 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 77 59 62 09 89 c0 48 c7 c7 c0 82 71 [ 2213.688916][T23384] RSP: 0018:ffffc90005c0f9f8 EFLAGS: 00010202 [ 2213.688937][T23384] RAX: 0000000000000000 RBX: ffff8880260ddd00 RCX: 0000000080000001 [ 2213.688954][T23384] RDX: 0000000000000000 RSI: ffffffff8ba94360 RDI: ffffffff8ba94320 [ 2213.688970][T23384] RBP: ffff8880379dac80 R08: ffffffff8b29c9a0 R09: 0000000000000000 [ 2213.688995][T23384] R10: 0000000000000000 R11: ffffffff8dfc2fc0 R12: dffffc0000000000 [ 2213.689011][T23384] R13: ffff88802bffdf58 R14: 0000000000000000 R15: ffff888054af1180 [ 2213.689037][T23384] ? rt_spin_lock+0x1e0/0x400 [ 2213.689081][T23384] ? kcov_remote_start+0xda/0x6f0 [ 2213.689112][T23384] ieee80211_iface_work+0x20c/0x1010 [ 2213.689158][T23384] cfg80211_wiphy_work+0x29e/0x420 [ 2213.689187][T23384] ? process_scheduled_works+0xa20/0x14e0 [ 2213.689221][T23384] process_scheduled_works+0xa8e/0x14e0 [ 2213.689289][T23384] ? __pfx_process_scheduled_works+0x10/0x10 [ 2213.689333][T23384] ? assign_work+0x3cf/0x5d0 [ 2213.689375][T23384] worker_thread+0xa47/0xfb0 [ 2213.689442][T23384] kthread+0x388/0x470 [ 2213.689470][T23384] ? __pfx_worker_thread+0x10/0x10 [ 2213.689503][T23384] ? __pfx_kthread+0x10/0x10 [ 2213.689532][T23384] ret_from_fork+0x514/0xb70 [ 2213.689564][T23384] ? __pfx_ret_from_fork+0x10/0x10 [ 2213.689592][T23384] ? __switch_to+0xc89/0x1420 [ 2213.689619][T23384] ? __pfx_kthread+0x10/0x10 [ 2213.689648][T23384] ret_from_fork_asm+0x1a/0x30 [ 2213.689698][T23384] [ 2213.690303][T23384] Kernel Offset: disabled