last executing test programs: 6.168709604s ago: executing program 2 (id=2505): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 5.916972063s ago: executing program 2 (id=2508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_ethernet(0xc3, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x8d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x7, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406"}, {0x3, 0x7, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13"}, {0x22}]}}}}}}, 0x0) 5.679083532s ago: executing program 4 (id=2511): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc0400f67f08000b"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) 5.651203597s ago: executing program 3 (id=2512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.093190417s ago: executing program 4 (id=2513): socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_init1(0x80800) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 4.874474696s ago: executing program 3 (id=2515): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001780)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r7, 0x0, 0x80, 0x8) vmsplice(r6, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0x1000}], 0x1, 0x0) write(r4, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f7, 0xffffffff, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.797128359s ago: executing program 2 (id=2516): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000340)=[0x7fffffff, 0x8622], 0x2) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x8800) syz_usb_connect(0x0, 0xab2, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x79, 0x8a, 0x9e, 0x10, 0x1740, 0x602, 0xfc37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa0, 0x4, 0xe, 0x80, 0xd0, 0x4, "", [{{0x9, 0x4, 0x5, 0x59, 0xe, 0x51, 0xc6, 0xfd, 0x54, [@uac_as], [{{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe, 0x2, 0x8, [@generic={0x54, 0x1, "363aabbe25ecec28b9c691186408995a190c4136684a37a4b47dad67971c9bd7972b07ab7a132e3d0dbfbb3307d2329f8b2640dd4b82663c5c48c7c5e798cb8541347570d84a2b4f17e8bde2b2f5c98a2a10"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x6, 0x27, 0x2}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x21, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x1, 0x40}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0xc, 0x74, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x7f}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xb, 0x8, 0x4, [@generic={0x6e, 0x7, "cafec4e3af6cd902aac955ac0106292109fb83ff8b45dfcabe4f2f4e8efc9f188a608749ed5885a40ec0c4dc9ea19d783ee538c238636aeb1533e33bf3d8537888debbfce50df02951d5d3b489f7e1f11f4d010d03f1a24a5a6714c2c3088349a2143d0d077a062a67df3b92"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x401}]}}, {{0x9, 0x5, 0x8, 0x4, 0xe5f6b666698fa83e, 0x2, 0x2, 0x5, [@generic={0x12, 0x7, "c2e2d50ddbd42fd5d889c2582b476cec"}, @generic={0x5e, 0xa, "4ff9f643697c5c51fc7662c17563d73eb6ec11bf01f1f33a60396098d403682708215730d5226dc1d47d7316d6fa1868f27b8d37b91a4be5a83d228e9af1a3e2c3366ddc504b1cfbaba0f77938cf971bfd0ae9dc11f8f51bcf71c40f"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x1ff, 0x9, 0x5, 0x9, [@generic={0xb1, 0x10, "7b3e1ac2acd6512c99b44ee9496194247b7a6a4f41cc11ffaac1d309fb5ae5789949e9f6217fef64fb322846d440ab915f6ee9a1e3a574c4f89a2340be6203cb74e6448082fbf5919a70f2ebfc6491c00df91a1b1be34da3c884488285639cf29cc25df64bfd5d189722a2fe2fb5a4a2201fef90d1387f67b9f5135c47721828815bfd68e30f5541536b1ccbcf0dfd24e5af280cddc492cfacb6ead73279fdba1d15d0e46bfb691c4a4dd67ed75a18"}, @generic={0xf3, 0x11, "49e3cd7fb6f1781e221c7ecc57397925e31ee4aab1754a6f7cebba4a4ba6cc6ecf1b4ea7bf8313e3531392b9d60254463cc57653abb201b14bce11f533f713b2f7a61830732ee488a5b5c5cc8a656521171b71b175d60888ef320684fa8d6b25817a28b0ee02d4c11c6e68d2eff4508cd5db496271823a3f1e3ad2ac53e136b3d2a0ef0b7bbf5c1e668e457cd9cb347a487981920531deaf04d877d7e7cadc620a545e7875359f78cfce1474214582c288359d0a318fb3d196c4aa26fa33ba2f0516cd73922bdb0f82e41c536f425bb75f9c7d37310ea361916fb770bb78cf96d68335bb4210f99b272cf2b48e05446f8c"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x8, 0x10, 0x9}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x6b, 0x2, 0x80, [@generic={0x8d, 0x31, "7252e73710ce563144c2f73377695c3f9657ef1cb93eb6529a32c33c1a6a28fd13c18756001e9840383b0625606a3223a4fabb1c8af72e1e350ceb2d9507b90d73b5b42f12cbb28312b07990328490d2b7a846a7b56a7423d13118607fc6f732b4cda9e9fa0395c3c2dc37aa45949c9936522b483c2ea93747014ea0e331f7e520ff78847e1217bcbcc671"}, @generic={0x70, 0x1, "eb44e29ad5b07f6b332374eac9b58929fa9841681e0a8e45e4fa92c90e9c52a5be5ca53a0d9a1b8c4431c8edc7efe39e84246f914a9698e6325c1c2858057a2c5cb6ac7b2940cb93663d8c02817d2df5bf1a43bad3a3f13dfab46da78a6b8fff98318cc6eed34216474d4e9b02cf"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x8, 0xb3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xc360}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x2, 0x7, 0x9, [@generic={0x21, 0x9, "e25fd8500244ed2c92f8aca0395251d8b425f3cab8a267e1a37385294114ff"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x5, 0x7, 0x4d, [@generic={0x4b, 0x7, "9058b34986ae2b170b643629bbb6add96a8c273297550d295b50f656c6aa29b61ea2ccdf4f4473f0701c7f6f571309dc5d18746839ccc7b15d15f1562c48ba4bd95b4849a5dd121c0f"}, @generic={0x2f, 0x31, "68c073d22604395da5d9170e7af25d681e588ce56d5a3b88d2581fd8163658d781c2201b12bac1214b55aad3a3"}]}}]}}, {{0x9, 0x4, 0xa4, 0xfb, 0x0, 0x8f, 0x87, 0x56, 0x0, [@uac_as]}}, {{0x9, 0x4, 0xe5, 0xbf, 0xf, 0x45, 0x98, 0x8f, 0x2, [], [{{0x9, 0x5, 0x9, 0x3, 0x200, 0x8, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xfd9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x7, 0xff, 0x5, [@generic={0xdf, 0x0, "29e461e72ef10e3d1803d2a4b1b16e2e4e0469419aa1c5f48649820ee7586055eacd2eef27a5e7563d7ee8dc911cf31ad53bd9ef92600660620190178c9ce5ae0cc8b5d9018607d8e362dccc46481e27724fb9b62197026c412cbcccd6979875b97419299e22294fc23cbd5c3ba6ea21175b064e6fd6e97a51d0d73059d2a2a66257f076bfc66cff610ba7d90bd7fdd11794f594ce141da10e7d2111aca9ab800126d09abe93c41792f79109fad6a0ca55fe505a37ebc7806b3eed57ef6e0841d406f53cba7954e35f7b3d9e4226f1f75795ebb082b4d68a037f1dfe7c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfe52}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x6, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x5, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x39f, 0xf2, 0x66, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0xff, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x7, 0xf8, [@generic={0xf5, 0x23, "5763ea70110b1b58361d2b3fe1127e6b8f949de4882ea7385e3295786cd2e2409a94aff1af91269a57c4ac7bfb39e30d3e081e6b0e06487fd6116aef7323c4e14115f693d54e6008e0d6d8ad5064c2321ac2875a44bd6a0ca07b5c43a27775c62f748e014158f1ff8447436a12b55b88da7e1b7943281b5bc99843d8a2b885921d39dd3c353293445dd9d39fb546684eb186398ac734a743c2c4d8ff5da5964ed01f7e597aa5d2ff490341d443ca3c14e0234ac34c3f67a5716e424517be3ee34a243283f7e03201667c27a8f6e1e22cb3949b6440ba2e062d4edc6194a42e61e13ab4a5e136889aa7d7a88fff00f6ac3db20d"}, @generic={0x81, 0xb, "75eaceab078b81782510324dff96285af4c7496e4cf26fbef1be81e205d387ed026f3be52111f2ec8e5a47f51437c03e3d5177a9e012b229a5867da6443b6642cd8da8e28f8d402eee05cd9a0d976909fbf96df965ab961447ed0c3927894c15c5043fd2ca73eec97c97ff37bff000f69ae1e49d66be870a7ab1c40cc88a87"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x9, 0x3, 0xa}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xe6, 0x8, 0x8, [@generic={0x6a, 0x21, "b1d930d0016031ad7af4fdcdd031ecfb9c9ee7e0351cb804875e01ea3241aaea489aba62927be5a2ba5a54bf8dc123fad9cd2b86d14273d7a976c11aa5b2caf296bcb1c4805978ca5b03fa5b6dc3e56ce08931b22a428ca75642a9ba00e22dac7dc0e6bfbe4ecee1"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0xc1, 0x31, 0x3e, [@generic={0x5a, 0x6, "bdaa939927c219db14012bced418c35b3f51c89606255208647044b58bf6d883aa625f11d251ab3f3795f18679626cc42538fb6e79b90cd85e638c3703c29a4d9b05870c5e2ae3e22d126116551473abf33dd1a1716a249d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x1, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0x2, 0x2}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0xa9, 0x8, 0xe}}, {{0x9, 0x5, 0xf, 0x11, 0x3ff, 0x6, 0x7, 0x7}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x3, 0x5, 0x5, [@generic={0xde, 0x4, "05906a7cdd2946b6fb63f77eefc57b6b124e826c119ed3e5e85f765ec5a3264ca9839e1ce53379c63e7e330f2f7c11e0b592956b3094609eb07b3cf308e48b73ecaf0e9a37853d5134c4cb953b098f6b413aa9b20e0d2dbbae16e512d5854aa1bc7fa1b88dbb7e203ed9e0607894aab8d10ec6a37583597a0880a150be1967e336dac8fc0df543c76c2a0a515dd445db0a6debea874caaa98544b62d9d302f68d0e86bcb4717de5c0243931cd467367612c4276be647291bec2dad9c8c606737c59498aaab7f61595d1abd1ba9ef9d5e58c6dacd737028b53d726237"}]}}]}}, {{0x9, 0x4, 0xf8, 0x7, 0x7, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x6, 0x3, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x0, 0x1, 0xb}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xbc, 0x7, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0x8, 0x6}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x3, 0x8f, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x80, 0x5, 0xfd}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4b, 0x20, 0x0, [@generic={0x6f, 0x22, "8e6f713522642120a003dad3e6768dff739796be240732340221f73bc2c597fe9b3178a31258124d9f228095bd50bbe4862578e9834265eeff0a0930dda76b9f2fe3c9dfe0de915b71a3cae583958132af5b51710a9306d31c73cf5d6668d39a62b28db6f2cfc5d61ed0c8a83d"}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x44a8e8290645265d, 0x2, 0x2b, 0x3, 0x20, 0xf8}, 0x5, &(0x7f0000001000)={0x5, 0xf, 0x5}, 0xa, [{0x65, &(0x7f0000001080)=@string={0x65, 0x3, "c46f6e08aec82b4b9654f0a23e7f16b152748b09dec4dfd1709cd1d36677ff82fcc49b9455e9a1c6da0968a5a3f1c999ec0e868744baad3533b6fe27f3cb3b5efb6f1318581c4389761f119ad9a803ee92f013bbbab963af0c058ea64d629e991fbcd0"}}, {0x2, &(0x7f0000001100)=@string={0x2}}, {0x48, &(0x7f0000000240)=ANY=[]}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x42c}}, {0xc9, &(0x7f0000000140)=@string={0xc9, 0x3, "192158656f5470eb9c45f138c39422c455ac36b350b277da9ce4191d5312921c8df8f4a91b8127964482f6b0823872d1ccead185ca0eedf44506d0e44d9eddd7e5e302a7cda4bc6257feecf5179bf222c9ed4766c3b96d590bfe9676eeb4e70b7329c00033340f5984709d10466a91e182d675db60679330951f058016ff75e9be4000ba1507c2854bcbae7b5550a62ae299dee38d590cec77bbc75bf9728ba6273c76eec782c6fd9d6685769bf9582d4a34b920c052503a9680530ec983a15903b81d7dd2499f"}}, {0xfe, &(0x7f0000001200)=ANY=[@ANYBLOB="fe03bec24c1f3b789f1e1a588cd87eb974c8532807d3754f579a4765ce1e650044201fc1bc651225400a4c97866becb8be8ced520389433381df3b6c1a9313d05b586bc70a31d52a4fc65f39cb5e73077f99033ab8d42b69d726aea794ed80bd2b817d40387ec919fa5f1d5736c153a85f701131b85d332e3b8443dd8ac6bf0c7211d503ef7557bf83182fb5cac4eab264a4c03fae3b8649908d9665015dc21c8fb31b32ef2900041e85316f6727f5c52415dcb2f42575a4042ad7c605b1f1310a6feef215d1a4e28873b44cf5476b124e875de2c20a3fac19c69c67e0418ece97ba5c1cff18d21821f4494d4626608498fc3b3b119afe70a407e716d517"]}, {0xad, &(0x7f0000001300)=@string={0xad, 0x3, "eda7827295f4dae1e87b8bbf4798ba7c4d4aa2ba044b7088349e34c33bec1efa8a6caba91c428ca7f52e88405795d10da0d0124f330007e107976c37be2829353e9fe1eb6f54643df34cc9776a580e3c1056b9907cc1626444d186840e03068cf2eed8247ce89a79d85b5c03335e2db7437a8a33680629e663b49856d518764277fd076326652af87c314fe113bdfd172fc6cd30253d7c467d867df0a65c054831b99b81ce02d9bc830000"}}, {0xcb, &(0x7f00000016c0)=@string={0xcb, 0x3, "4e171b061d4291af88db6b42c5fe111d7c340c361be3bc7f4e6fbf8c7f82986662c8f4de26b58df88fc67692fc784d39d88a3857cc78fbcbb630b73ef35aeb40bcf19d3d35d1187c125a0916e24886d1794a481d2b5d297b559e372541bde1f10dc84abbfa9affdd8583bac8dd9a4332d030e3c0a31ef8d5be8816735c8851ddfc6bc0fb860ee6edc0e6e466aa36ff1f0aa44b72f4f340a48474f55684620a8095cd89a0d4db66342715efba679bcc4ffd032fa1644a0944c52f78b64669aa5ac196e30160ad353b51"}}, {0x60, &(0x7f0000001440)=@string={0x60, 0x3, "c65f598fb8efda0c872b647ee6e155f19a935a0b17f5c13ed40d92d8c5dbb1a2e6efd7a0a67637e4b2fa9c4d3bd816734052b59eeb1ea08c16f26a85aff4d3c359ac801d40ce265f25c8e5a51128eb609a704ca9e58b1d5abdf5a58e0f2d"}}, {0x102, &(0x7f0000001900)=ANY=[@ANYBLOB="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"]}]}) 4.261576586s ago: executing program 0 (id=2518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'F'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.948012847s ago: executing program 1 (id=2519): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) write$FUSE_WRITE(r1, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 3.545870403s ago: executing program 0 (id=2520): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2a040, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0x18}, 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 3.489027672s ago: executing program 3 (id=2521): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x40000102, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 3.340355644s ago: executing program 4 (id=2522): close(0x4) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x68, 0x0, 0x0, 0x1, 0x0, @multicast1, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x40, 0x49, 0x0, {0x10, 0x4, 0x1, 0x2, 0x4, 0x65, 0x6, 0x6, 0x1d, 0x6, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x3, 0x47}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @rr={0x7, 0x3, 0x64}, @cipso={0x86, 0xd, 0x3, [{0x1, 0x5, "20ef53"}, {0x0, 0x2}]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x0, 0x2}]}, @timestamp={0x44, 0x4, 0xc2, 0x0, 0x1}, @ssrr={0x89, 0x7, 0xb9, [@local]}]}}}}}}}, 0x0) 3.224639528s ago: executing program 3 (id=2523): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.211592131s ago: executing program 0 (id=2524): r0 = io_uring_setup(0x7b0c, &(0x7f0000000900)={0x0, 0x1246, 0x1000, 0x1, 0x1060}) syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffbb, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f00000005c0)=ANY=[], 0x0}, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x20, 0x1, 0x50, "86d3cefd00fe230924bfde39dff33ae420ef9df2001944caa45eadee38ade3bdb2ad3396d41267444723e8e9abccbfd21830b086aa491fedb1c037ab3c0eb18564aa1eddc51b10aa6eb6d40a46384059"}, 0x0, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000980)={0xc0, 0x5, 0x3, "dfabee"}, &(0x7f00000009c0)={0x40, 0x5, 0x6, "b3b42ce32f9f"}}) getresgid(0x0, 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000480)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xcb\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '<*d\x11\x19v\xf8}!\xc7}\xbeMP\xfc|\x9d\xef\xfe-\xe18a\xc5\x16T\xaa?\x958v\xa4$\x1f*\x1c\b\x11|\t\x87\xb4\xb2U\xe3\xaddd\x87\xcbRT\x01\xff\xac\xf4u\xa4\xcbV>\xf2\x81]o \xdfu\x01k\xf0\xa1)eEd\xac \xca\x1f\xf2\x93\xb2\x8d\xd0\x83\xc0b\xe1Lc\x043\x93\"\xe0\xfe\xa7h$\xbd_\xfa\xab\xae\xe3\xce\xc5\x8bB\xa9`r_\xb96\xa0\xf99\xa0\xeb-9K\x97\x85%\xb7\xc9\xfa6\xa7\x02\x9f\xbfb\x19\x89\xe8\x8do\x1eT\xb5\xea}7l\x8a\xaaK\x18\xc7', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x4f, 0x46, 0x50]}, 0xd0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000001c0)={0xc, &(0x7f0000000100)={0x40, 0x4, 0x3b, {0x3b, 0x30, "ae4b51f14324da21e70bee9fbaf3189c9522694eadbc07766e33b807f44493c59c7d4d08882040d4def14ea33e77880c7cff742231062490dd"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, r0, 0x0) 3.145005331s ago: executing program 2 (id=2525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.053067668s ago: executing program 4 (id=2526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_ethernet(0xc3, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x8d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x7, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406"}, {0x3, 0x7, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13"}, {0x22}]}}}}}}, 0x0) 2.793919944s ago: executing program 1 (id=2527): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.757776485s ago: executing program 3 (id=2528): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0x18}, 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 2.432935775s ago: executing program 0 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(r1, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001600)=0x7, 0x4) r5 = socket(0x11, 0x3, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$RTC_WIE_OFF(r6, 0x7010) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040010) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="db75a227cc2c157a3ffd7f34de5fcfa4ff000022", @ANYRES16=r8, @ANYBLOB="080028bd7000fcdbdf250900000044000380060007004e23000014000600000000000000000000000000000000010800010002000000060004000300000014000200697036746e6c3000000000000000000020000380140006000000000000000000000000000000000108000500ac1e0e010c0002800800060006000000080006000200000030000380050008000000000008000500e00000011400020065727370616e3000000000000000000008000100020000000400028008000600ffffffff0800040005000000"], 0xd0}}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, 0x0, 0x0) 2.394208172s ago: executing program 1 (id=2530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 2.393248751s ago: executing program 2 (id=2531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'F'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.35085426s ago: executing program 3 (id=2532): socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_init1(0x80800) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x5000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 1.86610842s ago: executing program 1 (id=2533): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2a040, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0x18}, 0x18) 1.834570086s ago: executing program 4 (id=2534): close(0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.076805534s ago: executing program 2 (id=2535): socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_init1(0x80800) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 965.361539ms ago: executing program 0 (id=2536): close(0x4) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x68, 0x0, 0x0, 0x1, 0x0, @multicast1, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x40, 0x49, 0x0, {0x10, 0x4, 0x1, 0x2, 0x4, 0x65, 0x6, 0x6, 0x1d, 0x6, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x3, 0x47}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @rr={0x7, 0x3, 0x64}, @cipso={0x86, 0xd, 0x3, [{0x1, 0x5, "20ef53"}, {0x0, 0x2}]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x0, 0x2}]}, @timestamp={0x44, 0x4, 0xc2, 0x0, 0x1}, @ssrr={0x89, 0x7, 0xb9, [@local]}]}}}}}}}, 0x0) 861.016787ms ago: executing program 1 (id=2537): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x0) 642.761208ms ago: executing program 0 (id=2538): syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12013301020000082505a0a440000102030109025c0002010000000904000001020d240000000d240f0100000000000000000006241a000008090511ee40"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x80000000020009) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x4001af84, &(0x7f0000000240)) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}]) 525.447362ms ago: executing program 1 (id=2539): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 4 (id=2540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.1.1614'. [ 512.433969][T11007] tipc: Disabling bearer [ 513.627922][T11039] syzkaller0: entered promiscuous mode [ 513.627948][T11039] syzkaller0: entered allmulticast mode [ 514.305075][T11058] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1631'. [ 514.305096][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1631'. [ 514.305113][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1631'. [ 514.348687][ T4916] Bluetooth: hci1: connection err: -111 [ 514.481596][T11060] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1631'. [ 515.351343][T11074] netlink: 'syz.2.1636': attribute type 10 has an invalid length. [ 516.424896][T11080] syzkaller0: entered promiscuous mode [ 516.424920][T11080] syzkaller0: entered allmulticast mode [ 516.468298][T11084] syzkaller0: entered promiscuous mode [ 516.468327][T11084] syzkaller0: entered allmulticast mode [ 517.315634][T11104] input: syz0 as /devices/virtual/input/input17 [ 517.619199][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 517.746459][ T5807] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.762540][ T5807] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.762588][ T5807] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.762620][ T5807] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.777252][T11117] tipc: Enabling of bearer rejected, failed to enable media [ 517.857921][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 518.390945][T11131] syzkaller0: entered promiscuous mode [ 518.390962][T11131] syzkaller0: entered allmulticast mode [ 518.484087][T11134] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1662'. [ 518.666536][T11140] netlink: 12712 bytes leftover after parsing attributes in process `syz.3.1662'. [ 518.887228][ T5745] IPVS: starting estimator thread 0... [ 519.001664][T11148] IPVS: using max 9 ests per chain, 21600 per kthread [ 519.067630][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1667'. [ 520.587270][T11178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1677'. [ 520.587299][T11178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1677'. [ 520.587315][T11178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1677'. [ 520.630889][T11180] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1678'. [ 520.682416][T11178] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1677'. [ 524.227000][T11217] __nla_validate_parse: 1 callbacks suppressed [ 524.227017][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 526.434796][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 526.676655][T11258] netlink: 5192 bytes leftover after parsing attributes in process `syz.3.1709'. [ 526.677189][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 526.845900][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 527.376069][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 528.789941][T11318] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1726'. [ 529.733183][T11332] syzkaller1: entered promiscuous mode [ 529.733208][T11332] syzkaller1: entered allmulticast mode [ 531.446744][T11366] input: syz0 as /devices/virtual/input/input18 [ 533.849383][T11410] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1765'. [ 534.104089][T11412] syzkaller0: entered promiscuous mode [ 534.104113][T11412] syzkaller0: entered allmulticast mode [ 537.143689][T11438] fuse: Bad value for 'fd' [ 537.574781][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 537.576242][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 538.342617][T11461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1786'. [ 538.384955][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.997987][T11550] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 548.240422][T11550] bond3: (slave bridge1): making interface the new active one [ 548.254228][T11550] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 548.282362][T11557] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 548.658850][T11570] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 548.769991][T11572] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 549.409324][T11570] bond4: (slave bridge1): making interface the new active one [ 549.410369][T11570] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 549.477914][T11570] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 549.485775][T11570] team0: entered promiscuous mode [ 549.485796][T11570] team_slave_0: entered promiscuous mode [ 549.486020][T11570] team_slave_1: entered promiscuous mode [ 549.486293][T11570] team0: entered allmulticast mode [ 549.486306][T11570] team_slave_0: entered allmulticast mode [ 549.486325][T11570] team_slave_1: entered allmulticast mode [ 549.562478][T11570] bond0: (slave team0): Releasing backup interface [ 554.428232][T11627] netlink: 'syz.1.1847': attribute type 10 has an invalid length. [ 555.560886][T11638] netlink: 'syz.2.1849': attribute type 10 has an invalid length. [ 555.561062][T11638] team0: left promiscuous mode [ 555.561098][T11638] team_slave_0: left promiscuous mode [ 555.562637][T11638] team_slave_1: left promiscuous mode [ 555.564034][T11638] team0: left allmulticast mode [ 555.564068][T11638] team_slave_0: left allmulticast mode [ 555.564151][T11638] team_slave_1: left allmulticast mode [ 555.583067][T11638] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.601708][T11638] bond0: (slave team0): Enslaving as an active interface with an up link [ 556.837850][T11656] syzkaller0: entered promiscuous mode [ 556.837876][T11656] syzkaller0: entered allmulticast mode [ 557.126724][T11660] input: syz0 as /devices/virtual/input/input19 [ 559.669367][T11702] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 560.487420][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 562.398431][T11727] syzkaller0: entered promiscuous mode [ 562.398456][T11727] syzkaller0: entered allmulticast mode [ 562.469462][T11733] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 563.020244][ T4916] Bluetooth: hci2: connection err: -111 [ 563.491679][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.491746][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.727650][T11736] bond7: (slave bridge1): making interface the new active one [ 563.732060][T11736] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 563.775596][T11737] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 563.775668][T11738] team0: entered promiscuous mode [ 563.775683][T11738] team_slave_0: entered promiscuous mode [ 563.775888][T11738] team_slave_1: entered promiscuous mode [ 563.775993][T11738] team0: entered allmulticast mode [ 563.776000][T11738] team_slave_0: entered allmulticast mode [ 563.776010][T11738] team_slave_1: entered allmulticast mode [ 563.814807][T11738] bond0: (slave team0): Releasing backup interface [ 563.943053][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 563.946762][T11755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.261618][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 564.421565][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 564.424197][ T10] usb 4-1: config 14 has an invalid interface number: 5 but max is 3 [ 564.424222][ T10] usb 4-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 564.424240][ T10] usb 4-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 564.424256][ T10] usb 4-1: config 14 has an invalid interface number: 164 but max is 3 [ 564.424274][ T10] usb 4-1: config 14 has an invalid interface number: 229 but max is 3 [ 564.424290][ T10] usb 4-1: config 14 has an invalid interface number: 5 but max is 3 [ 564.424299][ T10] usb 4-1: config 14 has an invalid interface number: 248 but max is 3 [ 564.424309][ T10] usb 4-1: config 14 has no interface number 0 [ 564.424317][ T10] usb 4-1: config 14 has no interface number 1 [ 564.424334][ T10] usb 4-1: config 14 has no interface number 2 [ 564.424341][ T10] usb 4-1: config 14 has no interface number 3 [ 564.424393][ T10] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 564.424407][ T10] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 564.424420][ T10] usb 4-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 564.424431][ T10] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 564.424442][ T10] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 564.424455][ T10] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 564.424466][ T10] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 564.424476][ T10] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 564.424487][ T10] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 564.424500][ T10] usb 4-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 564.424517][ T10] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 564.424528][ T10] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 564.424538][ T10] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 564.424549][ T10] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 564.424559][ T10] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 564.424570][ T10] usb 4-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 564.424581][ T10] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 564.424592][ T10] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 564.424602][ T10] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 564.424612][ T10] usb 4-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 564.424622][ T10] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 564.424631][ T10] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 564.424641][ T10] usb 4-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 564.424653][ T10] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 564.424663][ T10] usb 4-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 564.424680][ T10] usb 4-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 564.424700][ T10] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 564.424711][ T10] usb 4-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 564.424722][ T10] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 564.424732][ T10] usb 4-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 564.424741][ T10] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 564.424751][ T10] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 564.424761][ T10] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 564.424771][ T10] usb 4-1: config 14 interface 5 has no altsetting 0 [ 564.424779][ T10] usb 4-1: config 14 interface 5 has no altsetting 1 [ 564.424787][ T10] usb 4-1: config 14 interface 164 has no altsetting 0 [ 564.424795][ T10] usb 4-1: config 14 interface 229 has no altsetting 0 [ 564.424803][ T10] usb 4-1: config 14 interface 248 has no altsetting 0 [ 564.429388][ T10] usb 4-1: Dual-Role OTG device on HNP port [ 564.429645][ T10] usb 4-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 564.429658][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.429668][ T10] usb 4-1: Manufacturer: ꌦ迬௔⣃悬厠鋘頭穁릖ž끡㰼롉ᩒ㲔퓻찛앾쟟둬 [ 564.429676][ T10] usb 4-1: SerialNumber: Ь [ 564.612307][T11757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.741935][ T5745] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 564.911841][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 564.920493][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.920523][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.920559][ T5745] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 564.920585][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.034645][ T5745] usb 2-1: config 0 descriptor?? [ 565.065922][ T5745] hub 2-1:0.0: USB hub found [ 565.216637][ T10] usb 4-1: USB disconnect, device number 21 [ 565.248671][ T5745] hub 2-1:0.0: 1 port detected [ 566.080391][ T5745] hub 2-1:0.0: activate --> -90 [ 566.086666][ T10] usb 2-1: USB disconnect, device number 23 [ 566.692181][ T1914] kworker/u8:11 (1914) used greatest stack depth: 13600 bytes left [ 567.619303][T11840] netlink: 'syz.2.1928': attribute type 10 has an invalid length. [ 568.510063][T11845] syzkaller1: entered promiscuous mode [ 568.510079][T11845] syzkaller1: entered allmulticast mode [ 568.861757][T11847] team0: left promiscuous mode [ 568.861771][T11847] team_slave_0: left promiscuous mode [ 568.861949][T11847] team_slave_1: left promiscuous mode [ 568.862050][T11847] team0: left allmulticast mode [ 568.862057][T11847] team_slave_0: left allmulticast mode [ 568.862067][T11847] team_slave_1: left allmulticast mode [ 568.863961][T11847] bond6: left allmulticast mode [ 569.091589][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 569.241974][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 569.244101][ T10] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 569.244127][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.262312][ T10] usb 4-1: config 0 descriptor?? [ 569.284959][ T10] as10x_usb: device has been detected [ 569.286280][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 569.356865][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 569.449486][ T10] as10x_usb: error during firmware upload part1 [ 569.452439][ T10] Registered device nBox DVB-T Dongle [ 569.578211][ T10] usb 4-1: USB disconnect, device number 22 [ 569.889615][ T10] Unregistered device nBox DVB-T Dongle [ 569.927642][ T10] as10x_usb: device has been disconnected [ 570.652022][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 570.801999][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 570.805120][ T10] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 570.805146][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.810949][ T10] usb 4-1: config 0 descriptor?? [ 570.922937][ T10] as10x_usb: device has been detected [ 570.923868][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 571.145131][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 571.153752][ T10] as10x_usb: error during firmware upload part1 [ 571.154387][ T10] Registered device nBox DVB-T Dongle [ 571.157583][ T10] usb 4-1: USB disconnect, device number 23 [ 571.360957][ T10] Unregistered device nBox DVB-T Dongle [ 571.415159][ T10] as10x_usb: device has been disconnected [ 571.991618][ T8755] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 572.144045][ T8755] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 572.187585][ T8755] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 572.187613][ T8755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.187631][ T8755] usb 5-1: Product: syz [ 572.187645][ T8755] usb 5-1: Manufacturer: syz [ 572.187658][ T8755] usb 5-1: SerialNumber: syz [ 572.513058][T11911] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1962'. [ 572.515207][ T8755] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 572.515266][ T8755] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 572.515284][ T8755] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 572.583695][ T8755] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 572.600512][ T8755] usb 5-1: USB disconnect, device number 15 [ 572.781780][ T8756] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 573.001501][ T8756] usb 2-1: Using ep0 maxpacket: 16 [ 573.003128][ T8756] usb 2-1: config 14 has an invalid interface number: 5 but max is 3 [ 573.003152][ T8756] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 573.003170][ T8756] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 573.003187][ T8756] usb 2-1: config 14 has an invalid interface number: 164 but max is 3 [ 573.003199][ T8756] usb 2-1: config 14 has an invalid interface number: 229 but max is 3 [ 573.003209][ T8756] usb 2-1: config 14 has an invalid interface number: 5 but max is 3 [ 573.003219][ T8756] usb 2-1: config 14 has an invalid interface number: 248 but max is 3 [ 573.003229][ T8756] usb 2-1: config 14 has no interface number 0 [ 573.003237][ T8756] usb 2-1: config 14 has no interface number 1 [ 573.003245][ T8756] usb 2-1: config 14 has no interface number 2 [ 573.003252][ T8756] usb 2-1: config 14 has no interface number 3 [ 573.003310][ T8756] usb 2-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 573.003324][ T8756] usb 2-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 573.003337][ T8756] usb 2-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 573.003348][ T8756] usb 2-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 573.003359][ T8756] usb 2-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 573.003372][ T8756] usb 2-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 573.003383][ T8756] usb 2-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 573.003394][ T8756] usb 2-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 573.003405][ T8756] usb 2-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 573.003417][ T8756] usb 2-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 573.003442][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 573.003452][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 573.003462][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 573.003472][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 573.003482][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 573.003492][ T8756] usb 2-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 573.003503][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 573.003514][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 573.003524][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 573.003534][ T8756] usb 2-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 573.003544][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 573.003554][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 573.003565][ T8756] usb 2-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 573.003577][ T8756] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 573.003588][ T8756] usb 2-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 573.003606][ T8756] usb 2-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 573.003632][ T8756] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 573.003643][ T8756] usb 2-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 573.003656][ T8756] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 573.003666][ T8756] usb 2-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 573.003677][ T8756] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 573.003687][ T8756] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 573.003697][ T8756] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 573.003708][ T8756] usb 2-1: config 14 interface 5 has no altsetting 0 [ 573.003717][ T8756] usb 2-1: config 14 interface 5 has no altsetting 1 [ 573.003725][ T8756] usb 2-1: config 14 interface 164 has no altsetting 0 [ 573.003733][ T8756] usb 2-1: config 14 interface 229 has no altsetting 0 [ 573.003741][ T8756] usb 2-1: config 14 interface 248 has no altsetting 0 [ 573.103816][T11944] netlink: 'syz.3.1974': attribute type 10 has an invalid length. [ 573.788516][ T8756] usb 2-1: Dual-Role OTG device on HNP port [ 573.788840][ T8756] usb 2-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 573.788864][ T8756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.788880][ T8756] usb 2-1: Manufacturer: ꌦ迬௔⣃悬厠鋘頭穁릖ž끡㰼롉ᩒ㲔퓻찛앾쟟둬 [ 573.788896][ T8756] usb 2-1: SerialNumber: Ь [ 573.850536][T11934] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 574.208325][ T8756] usb 2-1: USB disconnect, device number 24 [ 574.309488][T11950] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 574.690183][T11951] bond4: (slave bridge2): making interface the new active one [ 574.719883][T11951] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 576.651669][ T5745] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 576.744556][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 576.746238][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.816662][ T5745] usb 3-1: config index 0 descriptor too short (expected 137, got 72) [ 576.820134][ T5745] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 576.820162][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.820180][ T5745] usb 3-1: Product: syz [ 576.820193][ T5745] usb 3-1: Manufacturer: syz [ 576.820206][ T5745] usb 3-1: SerialNumber: syz [ 576.877671][ T5745] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 577.095616][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 577.400658][ T8755] usb 3-1: USB disconnect, device number 17 [ 578.751482][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 578.896112][ T10] ath9k_htc: Failed to initialize the device [ 578.901518][ T8755] usb 3-1: ath9k_htc: USB layer deinitialized [ 579.572007][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 579.724586][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.724612][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 579.724660][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 579.724681][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.772548][ T10] usb 4-1: config 0 descriptor?? [ 579.777769][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 579.796752][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 579.898270][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 579.898993][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 579.899089][ T10] usb 4-1: media controller created [ 579.901161][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.004538][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 580.004658][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 580.162330][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 580.262316][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 580.262340][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 580.268865][ T10] usb 4-1: USB disconnect, device number 24 [ 580.291964][ T8756] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 580.441859][ T8756] usb 5-1: Using ep0 maxpacket: 32 [ 580.445554][ T8756] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 580.445581][ T8756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.460894][ T8756] usb 5-1: config 0 descriptor?? [ 580.478602][ T8756] as10x_usb: device has been detected [ 580.479456][ T8756] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 580.672858][ T8756] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 580.756659][ T8756] as10x_usb: error during firmware upload part1 [ 580.757216][ T8756] Registered device nBox DVB-T Dongle [ 580.767249][ T8756] usb 5-1: USB disconnect, device number 16 [ 580.899786][T12069] input: syz0 as /devices/virtual/input/input21 [ 581.038489][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 581.379072][ T8756] Unregistered device nBox DVB-T Dongle [ 581.406299][ T8756] as10x_usb: device has been disconnected [ 581.571693][ T8755] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 581.722193][ T8755] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 581.741957][ T8755] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 581.741986][ T8755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.742004][ T8755] usb 3-1: Product: syz [ 581.742017][ T8755] usb 3-1: Manufacturer: syz [ 581.742030][ T8755] usb 3-1: SerialNumber: syz [ 581.901572][ T8756] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 582.013003][ T8755] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 582.013536][ T8755] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 582.013558][ T8755] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 582.054602][ T8756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.054627][ T8756] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 582.054675][ T8756] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 582.054694][ T8756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.059668][ T8756] usb 4-1: config 0 descriptor?? [ 582.111985][ T8756] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 582.112032][ T8756] dvb-usb: bulk message failed: -22 (3/0) [ 582.134984][ T8755] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 582.160150][ T8755] usb 3-1: USB disconnect, device number 18 [ 582.197048][ T8756] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 582.211724][ T8756] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 582.211779][ T8756] usb 4-1: media controller created [ 582.251109][ T8756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.314087][ T8756] dvb-usb: bulk message failed: -22 (6/0) [ 582.314160][ T8756] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 582.318017][ T8756] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 582.362908][ T8756] dvb-usb: schedule remote query interval to 150 msecs. [ 582.362931][ T8756] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 582.367193][ T8756] usb 4-1: USB disconnect, device number 25 [ 582.647208][ T8756] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 583.543606][T12122] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2046'. [ 583.850408][T12126] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 584.140526][T12128] bond5: (slave bridge2): making interface the new active one [ 584.151002][T12128] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 584.174760][T12126] team0: entered promiscuous mode [ 584.174783][T12126] team_slave_0: entered promiscuous mode [ 584.174997][T12126] team_slave_1: entered promiscuous mode [ 584.175186][T12126] team0: entered allmulticast mode [ 584.175198][T12126] team_slave_0: entered allmulticast mode [ 584.175218][T12126] team_slave_1: entered allmulticast mode [ 584.212773][T12126] bond0: (slave team0): Releasing backup interface [ 584.274672][T12126] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.279888][T12126] bond5: (slave team0): Enslaving as an active interface with a down link [ 584.746796][T12141] netlink: 'syz.3.2053': attribute type 10 has an invalid length. [ 586.571502][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 586.742028][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 586.745325][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 586.745360][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.777247][ T10] usb 3-1: config 0 descriptor?? [ 586.813635][ T10] as10x_usb: device has been detected [ 586.814504][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 586.856454][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 586.896477][ T10] as10x_usb: error during firmware upload part1 [ 586.897109][ T10] Registered device nBox DVB-T Dongle [ 587.008541][ T8756] usb 3-1: USB disconnect, device number 19 [ 587.113841][T12171] netlink: 'syz.3.2066': attribute type 1 has an invalid length. [ 587.194768][T12175] bond5: (slave bridge3): making interface the new active one [ 587.195941][T12175] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 587.221963][T12171] team0: entered promiscuous mode [ 587.221983][T12171] team_slave_0: entered promiscuous mode [ 587.222305][T12171] team_slave_1: entered promiscuous mode [ 587.222477][T12171] team0: entered allmulticast mode [ 587.222489][T12171] team_slave_0: entered allmulticast mode [ 587.222507][T12171] team_slave_1: entered allmulticast mode [ 587.282709][T12171] bond0: (slave team0): Releasing backup interface [ 587.295157][ T8756] Unregistered device nBox DVB-T Dongle [ 587.322676][ T8756] as10x_usb: device has been disconnected [ 587.345093][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 587.360693][T12177] ALSA: mixer_oss: invalid OSS volume '' [ 587.521590][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 587.523784][ T10] usb 2-1: config 14 has an invalid interface number: 5 but max is 3 [ 587.523833][ T10] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 587.523849][ T10] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 587.523859][ T10] usb 2-1: config 14 has an invalid interface number: 164 but max is 3 [ 587.523868][ T10] usb 2-1: config 14 has an invalid interface number: 229 but max is 3 [ 587.523878][ T10] usb 2-1: config 14 has an invalid interface number: 5 but max is 3 [ 587.523887][ T10] usb 2-1: config 14 has an invalid interface number: 248 but max is 3 [ 587.523897][ T10] usb 2-1: config 14 has no interface number 0 [ 587.523905][ T10] usb 2-1: config 14 has no interface number 1 [ 587.523913][ T10] usb 2-1: config 14 has no interface number 2 [ 587.523920][ T10] usb 2-1: config 14 has no interface number 3 [ 587.523963][ T10] usb 2-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 587.523978][ T10] usb 2-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 587.523990][ T10] usb 2-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 587.524001][ T10] usb 2-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 587.524012][ T10] usb 2-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 587.524026][ T10] usb 2-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 587.524036][ T10] usb 2-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 587.524047][ T10] usb 2-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 587.524058][ T10] usb 2-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 587.524070][ T10] usb 2-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 587.524104][ T10] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 587.524115][ T10] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 587.524126][ T10] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 587.524137][ T10] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 587.524147][ T10] usb 2-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 587.524158][ T10] usb 2-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 587.524171][ T10] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 587.524181][ T10] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 587.524192][ T10] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 587.524203][ T10] usb 2-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 587.524213][ T10] usb 2-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 587.524223][ T10] usb 2-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 587.524234][ T10] usb 2-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 587.524247][ T10] usb 2-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 587.524257][ T10] usb 2-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 587.524277][ T10] usb 2-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 587.524297][ T10] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 587.524314][ T10] usb 2-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 587.524326][ T10] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 587.524337][ T10] usb 2-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 587.524347][ T10] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 587.524358][ T10] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 587.524368][ T10] usb 2-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 587.524379][ T10] usb 2-1: config 14 interface 5 has no altsetting 0 [ 587.524387][ T10] usb 2-1: config 14 interface 5 has no altsetting 1 [ 587.524395][ T10] usb 2-1: config 14 interface 164 has no altsetting 0 [ 587.524403][ T10] usb 2-1: config 14 interface 229 has no altsetting 0 [ 587.524412][ T10] usb 2-1: config 14 interface 248 has no altsetting 0 [ 587.529060][ T10] usb 2-1: Dual-Role OTG device on HNP port [ 587.529328][ T10] usb 2-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 587.529341][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.529350][ T10] usb 2-1: Manufacturer: ꌦ迬௔⣃悬厠鋘頭穁릖ž끡㰼롉ᩒ㲔퓻찛앾쟟둬 [ 587.529360][ T10] usb 2-1: SerialNumber: Ь [ 587.712840][T12168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 588.090474][ T10] usb 2-1: USB disconnect, device number 25 [ 588.372088][ T5622] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 588.521975][ T5622] usb 3-1: Using ep0 maxpacket: 32 [ 588.524152][ T5622] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 588.524179][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.535368][ T5622] usb 3-1: config 0 descriptor?? [ 588.764848][ T5622] as10x_usb: device has been detected [ 588.766090][ T5622] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 588.857998][ T5622] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 588.927553][ T5622] as10x_usb: error during firmware upload part1 [ 588.928199][ T5622] Registered device nBox DVB-T Dongle [ 588.941816][ T5622] usb 3-1: USB disconnect, device number 20 [ 589.397882][ T5622] Unregistered device nBox DVB-T Dongle [ 589.434370][ T5622] as10x_usb: device has been disconnected [ 589.559639][T12201] binfmt_misc: register: failed to install interpreter file ./file0 [ 590.597393][T12228] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2090'. [ 590.597409][T12228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2090'. [ 590.597419][T12228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2090'. [ 591.611092][T12256] binfmt_misc: register: failed to install interpreter file ./file0 [ 592.454341][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 592.604041][T12277] tipc: Enabling of bearer rejected, failed to enable media [ 593.992162][ T8756] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 594.141862][ T8756] usb 3-1: Using ep0 maxpacket: 16 [ 594.144005][ T8756] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.144031][ T8756] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 594.144045][ T8756] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.144062][ T8756] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 594.144074][ T8756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.151306][ T8756] usb 3-1: config 0 descriptor?? [ 594.181905][ T8756] usbhid 3-1:0.0: can't add hid device: -22 [ 594.182530][ T8756] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 594.577199][T12327] tipc: Enabling of bearer rejected, failed to enable media [ 594.736810][ T8756] usb 3-1: USB disconnect, device number 21 [ 595.637772][T12344] binder: BINDER_SET_CONTEXT_MGR already set [ 595.637783][T12344] binder: 12342:12344 ioctl 4018620d 200000000040 returned -16 [ 595.733098][T12347] netlink: 'syz.1.2133': attribute type 22 has an invalid length. [ 595.733118][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 595.733140][T12347] bond0: option ad_select: unable to set because the bond device is up [ 596.384625][T12362] syzkaller0: entered promiscuous mode [ 596.384642][T12362] syzkaller0: entered allmulticast mode [ 596.840581][T12367] tipc: Enabling of bearer rejected, failed to enable media [ 597.405382][T12385] fuse: Unknown parameter '/dev/sequencer' [ 597.789150][T12395] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 597.947238][T12395] bond8: (slave bridge2): making interface the new active one [ 597.952414][T12395] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 597.954537][T12401] team0: entered promiscuous mode [ 597.954563][T12401] team_slave_0: entered promiscuous mode [ 597.954756][T12401] team_slave_1: entered promiscuous mode [ 597.954923][T12401] team0: entered allmulticast mode [ 597.954935][T12401] team_slave_0: entered allmulticast mode [ 597.954954][T12401] team_slave_1: entered allmulticast mode [ 597.974981][T12401] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.010799][T12401] bond8: (slave team0): Enslaving as an active interface with a down link [ 600.102621][T12445] netlink: 'syz.3.2169': attribute type 24 has an invalid length. [ 600.102635][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 600.191551][ T5622] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 600.364085][ T5622] usb 5-1: config index 0 descriptor too short (expected 137, got 72) [ 600.367023][ T5622] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 600.367049][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.367067][ T5622] usb 5-1: Product: syz [ 600.367080][ T5622] usb 5-1: Manufacturer: syz [ 600.367087][ T5622] usb 5-1: SerialNumber: syz [ 600.390618][ T5622] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 600.456025][ T5745] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 600.557335][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 600.561599][ T8755] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 600.678481][ T8756] usb 5-1: USB disconnect, device number 17 [ 600.711890][ T8755] usb 4-1: Using ep0 maxpacket: 32 [ 600.713579][ T8755] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 600.713605][ T8755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.716593][ T8755] usb 4-1: config 0 descriptor?? [ 600.738198][ T8755] as10x_usb: device has been detected [ 600.739050][ T8755] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 600.818532][ T8755] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 600.897685][ T8755] as10x_usb: error during firmware upload part1 [ 600.898367][ T8755] Registered device nBox DVB-T Dongle [ 600.944316][ T5622] usb 4-1: USB disconnect, device number 26 [ 601.108089][ T5622] Unregistered device nBox DVB-T Dongle [ 601.166316][ T5622] as10x_usb: device has been disconnected [ 601.571863][ T5745] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 601.611815][ T5745] ath9k_htc: Failed to initialize the device [ 601.612536][ T8756] usb 5-1: ath9k_htc: USB layer deinitialized [ 602.040794][T12476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 602.041062][T12476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 602.041209][T12476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 602.295605][T12481] team0: left promiscuous mode [ 602.295626][T12481] team_slave_0: left promiscuous mode [ 602.295842][T12481] team_slave_1: left promiscuous mode [ 602.296020][T12481] team0: left allmulticast mode [ 602.296033][T12481] team_slave_0: left allmulticast mode [ 602.296052][T12481] team_slave_1: left allmulticast mode [ 602.612006][ T8755] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 602.644111][T12431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.821558][ T8755] usb 4-1: Using ep0 maxpacket: 16 [ 602.823772][ T8755] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 602.823797][ T8755] usb 4-1: config 252 has no interface number 0 [ 602.823840][ T8755] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 602.826627][ T8755] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 602.826654][ T8755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.826672][ T8755] usb 4-1: Product: syz [ 602.826685][ T8755] usb 4-1: Manufacturer: syz [ 602.826696][ T8755] usb 4-1: SerialNumber: syz [ 602.999524][ T8755] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 603.131784][ T8755] usb 4-1: USB disconnect, device number 27 [ 603.292105][ T4279] usb 4-1: Failed to submit usb control message: -19 [ 603.292126][ T4279] usb 4-1: unable to send the bmi data to the device: -19 [ 603.292135][ T4279] usb 4-1: unable to get target info from device [ 603.292143][ T4279] usb 4-1: could not get target info (-19) [ 603.292152][ T4279] usb 4-1: could not probe fw (-19) [ 604.055043][ T4916] Bluetooth: hci1: command 0x0c1a tx timeout [ 604.055067][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 604.055085][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 604.529595][T12516] netlink: 'syz.4.2195': attribute type 24 has an invalid length. [ 604.529614][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 608.641577][ T5622] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 608.803839][ T5622] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 608.803867][ T5622] usb 5-1: config 0 has no interface number 0 [ 608.803908][ T5622] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 608.803928][ T5622] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 608.803951][ T5622] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 608.803987][ T5622] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 608.804010][ T5622] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 608.804032][ T5622] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.804071][ T5622] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 608.804091][ T5622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.828527][ T5622] usb 5-1: config 0 descriptor?? [ 608.863518][T12565] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.864503][T12565] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.934745][ T5622] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 609.125053][ T5622] usb 5-1: USB disconnect, device number 18 [ 609.161344][ T5622] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 610.057286][T12595] netlink: 'syz.3.2223': attribute type 10 has an invalid length. [ 610.057460][T12595] team0: left promiscuous mode [ 610.057503][T12595] team_slave_0: left promiscuous mode [ 610.059049][T12595] team_slave_1: left promiscuous mode [ 610.063732][T12595] team0: left allmulticast mode [ 610.063797][T12595] team_slave_0: left allmulticast mode [ 610.063915][T12595] team_slave_1: left allmulticast mode [ 610.080765][T12595] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.098700][T12595] bond0: (slave team0): Enslaving as an active interface with an up link [ 610.892546][T12597] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 610.971016][T12597] bond9: (slave bridge3): making interface the new active one [ 610.972855][T12597] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 610.981363][T12597] team0: entered promiscuous mode [ 610.982279][T12597] team_slave_0: entered promiscuous mode [ 610.983116][T12597] team_slave_1: entered promiscuous mode [ 610.983301][T12597] team0: entered allmulticast mode [ 610.983313][T12597] team_slave_0: entered allmulticast mode [ 610.983332][T12597] team_slave_1: entered allmulticast mode [ 611.050272][T12597] bond8: (slave team0): Releasing active interface [ 611.093622][T12597] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.110494][T12597] bond9: (slave team0): Enslaving as an active interface with a down link [ 611.558811][T12615] tipc: Enabled bearer , priority 2 [ 611.559251][T12615] netdevsim netdevsim2 : renamed from netdevsim0 [ 611.594164][T12615] tipc: Disabling bearer [ 612.441546][ T8756] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 612.594945][ T8756] usb 4-1: Using ep0 maxpacket: 16 [ 612.597947][ T8756] usb 4-1: config 14 has an invalid interface number: 5 but max is 3 [ 612.597972][ T8756] usb 4-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 612.597991][ T8756] usb 4-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 612.598008][ T8756] usb 4-1: config 14 has an invalid interface number: 164 but max is 3 [ 612.598026][ T8756] usb 4-1: config 14 has an invalid interface number: 229 but max is 3 [ 612.598044][ T8756] usb 4-1: config 14 has an invalid interface number: 5 but max is 3 [ 612.598061][ T8756] usb 4-1: config 14 has an invalid interface number: 248 but max is 3 [ 612.598079][ T8756] usb 4-1: config 14 has no interface number 0 [ 612.598093][ T8756] usb 4-1: config 14 has no interface number 1 [ 612.598107][ T8756] usb 4-1: config 14 has no interface number 2 [ 612.598121][ T8756] usb 4-1: config 14 has no interface number 3 [ 612.598197][ T8756] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 612.598224][ T8756] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 612.598247][ T8756] usb 4-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 612.598269][ T8756] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 612.598291][ T8756] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 612.598315][ T8756] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 612.598335][ T8756] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 612.598355][ T8756] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 612.598377][ T8756] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 612.598409][ T8756] usb 4-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 612.598449][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 612.598470][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 612.598490][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 612.598510][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 612.598530][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 612.598550][ T8756] usb 4-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 612.598573][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 612.598594][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 612.598614][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 612.598634][ T8756] usb 4-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 612.598653][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 612.598671][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 612.598691][ T8756] usb 4-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 612.598714][ T8756] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 612.598733][ T8756] usb 4-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 612.598775][ T8756] usb 4-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 612.598813][ T8756] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 612.598834][ T8756] usb 4-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 612.598858][ T8756] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 612.598877][ T8756] usb 4-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 612.598895][ T8756] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 612.598914][ T8756] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 612.598934][ T8756] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 612.598953][ T8756] usb 4-1: config 14 interface 5 has no altsetting 0 [ 612.598969][ T8756] usb 4-1: config 14 interface 5 has no altsetting 1 [ 612.598984][ T8756] usb 4-1: config 14 interface 164 has no altsetting 0 [ 612.598999][ T8756] usb 4-1: config 14 interface 229 has no altsetting 0 [ 612.599014][ T8756] usb 4-1: config 14 interface 248 has no altsetting 0 [ 612.645896][ T8756] usb 4-1: Dual-Role OTG device on HNP port [ 612.646199][ T8756] usb 4-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 612.646222][ T8756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.646240][ T8756] usb 4-1: Manufacturer: ꌦ迬௔⣃悬厠鋘頭穁릖ž끡㰼롉ᩒ㲔퓻찛앾쟟둬 [ 612.688685][T12633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 612.862032][ T5622] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 613.076974][ T8756] usb 4-1: USB disconnect, device number 28 [ 613.090240][ T5622] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 613.252723][ T5622] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 613.252750][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.252767][ T5622] usb 5-1: Product: syz [ 613.252780][ T5622] usb 5-1: Manufacturer: syz [ 613.252792][ T5622] usb 5-1: SerialNumber: syz [ 613.607858][ T5622] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 613.607912][ T5622] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 613.607930][ T5622] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 613.655063][ T5622] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 613.674762][ T5622] usb 5-1: USB disconnect, device number 19 [ 618.367276][ T9690] Bluetooth: hci1: connection err: -111 [ 618.581200][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2260'. [ 618.931564][ T8756] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 619.101896][ T8756] usb 5-1: Using ep0 maxpacket: 16 [ 619.103518][ T8756] usb 5-1: config 14 has an invalid interface number: 5 but max is 3 [ 619.103541][ T8756] usb 5-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 619.103559][ T8756] usb 5-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 619.103574][ T8756] usb 5-1: config 14 has an invalid interface number: 164 but max is 3 [ 619.103584][ T8756] usb 5-1: config 14 has an invalid interface number: 229 but max is 3 [ 619.103593][ T8756] usb 5-1: config 14 has an invalid interface number: 5 but max is 3 [ 619.103602][ T8756] usb 5-1: config 14 has an invalid interface number: 248 but max is 3 [ 619.103612][ T8756] usb 5-1: config 14 has no interface number 0 [ 619.103619][ T8756] usb 5-1: config 14 has no interface number 1 [ 619.103627][ T8756] usb 5-1: config 14 has no interface number 2 [ 619.103634][ T8756] usb 5-1: config 14 has no interface number 3 [ 619.103677][ T8756] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 619.103694][ T8756] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 619.103707][ T8756] usb 5-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 619.103718][ T8756] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 619.103729][ T8756] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 619.103741][ T8756] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 619.103752][ T8756] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 619.103762][ T8756] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 619.103773][ T8756] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 619.103785][ T8756] usb 5-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 619.103811][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 619.103822][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 619.103832][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 619.103842][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 619.103851][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 619.103861][ T8756] usb 5-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 619.103873][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 619.103883][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 619.103893][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 619.103904][ T8756] usb 5-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 619.103915][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 619.103924][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 619.103935][ T8756] usb 5-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 619.103947][ T8756] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 619.103958][ T8756] usb 5-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 619.103981][ T8756] usb 5-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 619.104000][ T8756] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 619.104011][ T8756] usb 5-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 619.104022][ T8756] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 619.104033][ T8756] usb 5-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 619.104042][ T8756] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 619.104052][ T8756] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 619.104062][ T8756] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 619.104072][ T8756] usb 5-1: config 14 interface 5 has no altsetting 0 [ 619.104080][ T8756] usb 5-1: config 14 interface 5 has no altsetting 1 [ 619.104088][ T8756] usb 5-1: config 14 interface 164 has no altsetting 0 [ 619.104096][ T8756] usb 5-1: config 14 interface 229 has no altsetting 0 [ 619.104104][ T8756] usb 5-1: config 14 interface 248 has no altsetting 0 [ 619.111225][ T8756] usb 5-1: Dual-Role OTG device on HNP port [ 619.125377][ T8756] usb 5-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 619.125394][ T8756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.125404][ T8756] usb 5-1: Manufacturer: ꌦ迬௔⣃悬厠鋘頭穁릖ž끡㰼롉ᩒ㲔퓻찛앾쟟둬 [ 619.424003][T12685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.439203][T12695] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 619.707016][ T8756] usb 5-1: USB disconnect, device number 20 [ 619.729810][T12695] bond6: (slave bridge3): making interface the new active one [ 619.730833][T12695] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 619.951500][ T5745] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 620.121943][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 620.123607][ T5745] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 620.123634][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.127093][ T5745] usb 2-1: config 0 descriptor?? [ 620.163886][ T5745] as10x_usb: device has been detected [ 620.164761][ T5745] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 620.225479][ T5745] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 620.244807][ T5745] as10x_usb: error during firmware upload part1 [ 620.248615][ T5745] Registered device nBox DVB-T Dongle [ 620.336761][ T8756] usb 2-1: USB disconnect, device number 26 [ 620.506381][ T8756] Unregistered device nBox DVB-T Dongle [ 620.576889][ T8756] as10x_usb: device has been disconnected [ 620.671666][ T8755] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 620.823486][ T8755] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 620.823512][ T8755] usb 5-1: config 0 has no interface number 0 [ 620.823554][ T8755] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 620.823572][ T8755] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 620.823585][ T8755] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 620.823604][ T8755] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 620.823616][ T8755] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 620.823628][ T8755] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 620.823650][ T8755] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 620.823662][ T8755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.826474][ T8755] usb 5-1: config 0 descriptor?? [ 620.828829][T12708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 620.828922][T12708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 620.968379][ T8755] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 621.368461][ T8755] usb 5-1: USB disconnect, device number 21 [ 621.423415][ T8755] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 622.630116][T12741] netlink: 'syz.1.2282': attribute type 10 has an invalid length. [ 623.870410][T12746] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 624.052677][T12750] bond9: (slave team0): Releasing active interface [ 624.142322][T12750] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.159346][T12750] bond10: (slave team0): Enslaving as an active interface with a down link [ 624.294983][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.295022][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.831159][T12769] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 625.240399][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.292162][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.294644][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.320417][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.328925][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 625.843456][T12777] bond5: (slave team0): Releasing active interface [ 625.865130][T12777] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.879584][T12777] bond7: (slave team0): Enslaving as an active interface with a down link [ 627.215526][T12796] netlink: 'syz.2.2297': attribute type 10 has an invalid length. [ 627.498247][ T9690] Bluetooth: hci5: command tx timeout [ 627.871878][T12796] team0: left promiscuous mode [ 627.871904][T12796] team_slave_0: left promiscuous mode [ 627.872144][T12796] team_slave_1: left promiscuous mode [ 627.872306][T12796] team0: left allmulticast mode [ 627.872315][T12796] team_slave_0: left allmulticast mode [ 627.872325][T12796] team_slave_1: left allmulticast mode [ 627.914119][T12796] bond7: (slave team0): Releasing active interface [ 627.951713][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.954084][T12796] bond0: (slave team0): Enslaving as an active interface with an up link [ 628.884171][ T5622] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 628.944965][ T9690] Bluetooth: hci2: connection err: -111 [ 629.062512][ T5622] usb 3-1: Using ep0 maxpacket: 16 [ 629.064441][ T5622] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.064455][ T5622] usb 3-1: config 0 has no interfaces? [ 629.064472][ T5622] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 629.064483][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.081821][ T5622] usb 3-1: config 0 descriptor?? [ 629.170385][T12814] netlink: 'syz.1.2302': attribute type 1 has an invalid length. [ 629.416798][ T1336] tipc: Disabling bearer [ 629.621984][ T9690] Bluetooth: hci5: command tx timeout [ 629.722097][T12815] bond4: (slave gretap1): making interface the new active one [ 629.747908][T12815] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 630.134693][ T5622] usb 3-1: USB disconnect, device number 22 [ 630.421922][ T158] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 630.502614][ T158] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 630.699683][ T4279] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 630.908093][T12829] fuse: root generation should be zero [ 630.960768][ T4279] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 631.312315][ T1336] bridge_slave_1: left allmulticast mode [ 631.369353][ T1336] bridge_slave_1: left promiscuous mode [ 631.370554][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.623080][ T1336] bridge_slave_0: left allmulticast mode [ 631.623101][ T1336] bridge_slave_0: left promiscuous mode [ 631.632243][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.652326][ T9690] Bluetooth: hci5: command tx timeout [ 632.818830][ T1336] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 632.818927][ T1336] ip6gretap1 (unregistering): left allmulticast mode [ 633.657964][ T9690] Bluetooth: hci1: command 0x0c1a tx timeout [ 633.882892][ T1336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.401511][ T4916] Bluetooth: hci5: command tx timeout [ 634.618979][ T1336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.693304][ T1336] bond0 (unregistering): (slave team0): Releasing backup interface [ 634.743034][ T1336] bond0 (unregistering): Released all slaves [ 634.837158][ T1336] bond1 (unregistering): Released all slaves [ 634.895411][ T1336] bond2 (unregistering): Released all slaves [ 634.926074][ T1336] bond3 (unregistering): Released all slaves [ 634.949443][ T1336] bond4 (unregistering): Released all slaves [ 634.965323][ T1336] bond5 (unregistering): Released all slaves [ 635.025460][T12773] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.028247][T12773] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.029983][T12773] bridge_slave_0: entered allmulticast mode [ 635.037259][T12773] bridge_slave_0: entered promiscuous mode [ 635.073064][T12773] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.073178][T12773] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.073373][T12773] bridge_slave_1: entered allmulticast mode [ 635.083082][T12773] bridge_slave_1: entered promiscuous mode [ 635.152182][T12841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.185856][T12841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.186018][T12841] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 635.191784][T12841] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 635.228284][T12773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.228978][ T1336] tipc: Left network mode [ 635.240668][T12773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.340380][T12841] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 635.347589][T12773] team0: Port device team_slave_0 added [ 635.351137][T12773] team0: Port device team_slave_1 added [ 635.458963][T12773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.458979][T12773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.459002][T12773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.461231][T12773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.461245][T12773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.461269][T12773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.426060][T12879] loop5: detected capacity change from 0 to 7 [ 636.739987][T12879] Dev loop5: unable to read RDB block 7 [ 636.740020][T12879] loop5: unable to read partition table [ 636.740145][T12879] loop5: partition table beyond EOD, truncated [ 636.740187][T12879] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 637.172016][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 637.251610][ T4916] Bluetooth: hci5: command 0x0c1a tx timeout [ 637.251846][ T9690] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.451771][T12773] hsr_slave_0: entered promiscuous mode [ 637.495481][T12773] hsr_slave_1: entered promiscuous mode [ 637.778863][T12892] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 638.760307][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 638.914785][T12898] team0: entered promiscuous mode [ 638.914805][T12898] team_slave_0: entered promiscuous mode [ 638.914991][T12898] team_slave_1: entered promiscuous mode [ 638.915137][T12898] team0: entered allmulticast mode [ 638.915148][T12898] team_slave_0: entered allmulticast mode [ 638.915164][T12898] team_slave_1: entered allmulticast mode [ 638.973092][T12898] bond0: (slave team0): Releasing backup interface [ 639.000551][T12898] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.010437][T12898] bond5: (slave team0): Enslaving as an active interface with a down link [ 639.066552][T12897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 639.066749][T12897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 639.066959][T12897] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 640.582265][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.665154][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.091494][ T4916] Bluetooth: hci5: command 0x0c1a tx timeout [ 641.091532][ T4916] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.091558][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 642.192023][ T1336] team0 (unregistering): Port device team_slave_1 removed [ 642.305888][ T1336] team0 (unregistering): Port device team_slave_0 removed [ 642.662645][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 642.817505][T12773] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 643.083069][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 643.174308][ T4916] Bluetooth: hci5: command 0x0c1a tx timeout [ 643.175238][T12773] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 643.414338][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 643.873681][T12773] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 644.561174][T12773] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 644.848100][ T1336] IPVS: stop unused estimator thread 0... [ 644.851698][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 644.973222][T12946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 644.973413][T12946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 644.973577][T12946] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 645.801615][ T5745] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 645.822696][T12773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 645.982703][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 645.985308][ T5745] usb 5-1: config 14 has an invalid interface number: 5 but max is 3 [ 645.985332][ T5745] usb 5-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 645.985350][ T5745] usb 5-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 645.985367][ T5745] usb 5-1: config 14 has an invalid interface number: 164 but max is 3 [ 645.985384][ T5745] usb 5-1: config 14 has an invalid interface number: 229 but max is 3 [ 645.985403][ T5745] usb 5-1: config 14 has an invalid interface number: 5 but max is 3 [ 645.985419][ T5745] usb 5-1: config 14 has an invalid interface number: 248 but max is 3 [ 645.985438][ T5745] usb 5-1: config 14 has no interface number 0 [ 645.985452][ T5745] usb 5-1: config 14 has no interface number 1 [ 645.985467][ T5745] usb 5-1: config 14 has no interface number 2 [ 645.985481][ T5745] usb 5-1: config 14 has no interface number 3 [ 645.985557][ T5745] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 645.985583][ T5745] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 645.985606][ T5745] usb 5-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 645.985635][ T5745] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 645.985658][ T5745] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 645.985682][ T5745] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 645.985702][ T5745] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 645.985722][ T5745] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 645.985744][ T5745] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 645.985767][ T5745] usb 5-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 645.985800][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 645.985821][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 645.985840][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 645.985861][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 645.985881][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 645.985900][ T5745] usb 5-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 645.985924][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 645.985944][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 645.985964][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 645.985985][ T5745] usb 5-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 645.986004][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 645.986021][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 645.986039][ T5745] usb 5-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 645.986062][ T5745] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 645.986080][ T5745] usb 5-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 645.986129][ T5745] usb 5-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 645.986167][ T5745] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 645.986189][ T5745] usb 5-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 645.986213][ T5745] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 645.986232][ T5745] usb 5-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 645.986252][ T5745] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 645.986271][ T5745] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 645.986291][ T5745] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 645.986311][ T5745] usb 5-1: config 14 interface 5 has no altsetting 0 [ 645.986326][ T5745] usb 5-1: config 14 interface 5 has no altsetting 1 [ 645.986341][ T5745] usb 5-1: config 14 interface 164 has no altsetting 0 [ 645.986357][ T5745] usb 5-1: config 14 interface 229 has no altsetting 0 [ 645.986372][ T5745] usb 5-1: config 14 interface 248 has no altsetting 0 [ 646.006506][ T5745] usb 5-1: Dual-Role OTG device on HNP port [ 646.006826][ T5745] usb 5-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 646.006848][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.006866][ T5745] usb 5-1: Manufacturer: ꌦ迬௔⣃悬厠鋘頭穁릖ž끡㰼롉ᩒ㲔퓻찛앾쟟둬 [ 646.006881][ T5745] usb 5-1: SerialNumber: Ь [ 646.034209][T13013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 646.425533][ T5745] usb 5-1: USB disconnect, device number 22 [ 646.639109][T12773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 646.642767][T12773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 646.782564][T12773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 646.991178][T13034] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 647.013236][ T4916] Bluetooth: hci1: command 0x0c1a tx timeout [ 647.013258][ T9690] Bluetooth: hci5: command 0x0c1a tx timeout [ 647.013274][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 647.039001][T12773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 647.561104][T12773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.213057][T13039] bond5: (slave team0): Releasing active interface [ 648.234009][T13039] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.239462][T13039] bond6: (slave team0): Enslaving as an active interface with a down link [ 648.239640][T12773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 648.271550][ T5743] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 648.301259][T12773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.317426][T13049] syzkaller0: entered promiscuous mode [ 648.317441][T13049] syzkaller0: entered allmulticast mode [ 648.430848][ T5743] usb 3-1: config index 0 descriptor too short (expected 137, got 72) [ 648.442648][ T5743] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 648.442673][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.442690][ T5743] usb 3-1: Product: syz [ 648.442703][ T5743] usb 3-1: Manufacturer: syz [ 648.442715][ T5743] usb 3-1: SerialNumber: syz [ 648.485249][ T5743] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 648.507604][ T8755] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 649.166881][ T59] Bluetooth: hci2: connection err: -111 [ 649.765706][ T8755] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 649.783731][ T5743] usb 3-1: USB disconnect, device number 23 [ 649.824509][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 649.881693][ T8755] ath9k_htc: Failed to initialize the device [ 649.882155][ T5743] usb 3-1: ath9k_htc: USB layer deinitialized [ 650.018707][T12773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.080170][T12773] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.119093][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.119166][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.155389][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.155581][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.082236][T13075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 651.098836][T12773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.131225][T13075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 651.156849][T13075] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 651.817588][T12773] veth0_vlan: entered promiscuous mode [ 651.856493][ T5622] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 651.963698][T12773] veth1_vlan: entered promiscuous mode [ 652.041980][ T5622] usb 5-1: Using ep0 maxpacket: 16 [ 652.045131][ T5622] usb 5-1: config 14 has an invalid interface number: 5 but max is 3 [ 652.045158][ T5622] usb 5-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 652.045181][ T5622] usb 5-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 652.045202][ T5622] usb 5-1: config 14 has an invalid interface number: 164 but max is 3 [ 652.045223][ T5622] usb 5-1: config 14 has an invalid interface number: 229 but max is 3 [ 652.045244][ T5622] usb 5-1: config 14 has an invalid interface number: 5 but max is 3 [ 652.045263][ T5622] usb 5-1: config 14 has an invalid interface number: 248 but max is 3 [ 652.045281][ T5622] usb 5-1: config 14 has no interface number 0 [ 652.045297][ T5622] usb 5-1: config 14 has no interface number 1 [ 652.045312][ T5622] usb 5-1: config 14 has no interface number 2 [ 652.045326][ T5622] usb 5-1: config 14 has no interface number 3 [ 652.045465][ T5622] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 652.045493][ T5622] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 652.045519][ T5622] usb 5-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 652.045582][ T5622] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 652.045606][ T5622] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 652.045633][ T5622] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 652.045653][ T5622] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 652.045675][ T5622] usb 5-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 652.045698][ T5622] usb 5-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 652.045728][ T5622] usb 5-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 652.045766][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 652.045789][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 652.045810][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 652.045830][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 652.045852][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 652.045871][ T5622] usb 5-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 652.045899][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 652.045925][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 652.045947][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 652.045969][ T5622] usb 5-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 652.046052][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 652.046074][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 652.046100][ T5622] usb 5-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 652.046127][ T5622] usb 5-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 652.046149][ T5622] usb 5-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 652.046186][ T5622] usb 5-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 652.046226][ T5622] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 652.046248][ T5622] usb 5-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 652.046278][ T5622] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 652.046303][ T5622] usb 5-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 652.046322][ T5622] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 652.046344][ T5622] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 652.046366][ T5622] usb 5-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 652.046387][ T5622] usb 5-1: config 14 interface 5 has no altsetting 0 [ 652.046404][ T5622] usb 5-1: config 14 interface 5 has no altsetting 1 [ 652.046420][ T5622] usb 5-1: config 14 interface 164 has no altsetting 0 [ 652.046449][ T5622] usb 5-1: config 14 interface 229 has no altsetting 0 [ 652.046469][ T5622] usb 5-1: config 14 interface 248 has no altsetting 0 [ 652.075442][ T5622] usb 5-1: Dual-Role OTG device on HNP port [ 652.075746][ T5622] usb 5-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 652.075767][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.075784][ T5622] usb 5-1: Product: Ь [ 652.075797][ T5622] usb 5-1: SerialNumber: ℙ敘呯䖜㣱铃쐢걕댶뉐ᴙቓᲒ꧴脛阧艄냶㢂텲藑໊م鹍ퟝ꜂꓍押﹗鬗⋲晇맃奭︋皖듮௧⥳À㐳夏炄ႝ橆횂杠んᾕ者６䂾먀ܕ藂쭋箮偕⪦駢妍뭷寇狹ꚋ㰧苇ﷆ暝皅鍊ⵘ㑊₹勀㩐肖๓菉妡렃紝䧒 [ 652.105628][T13095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 652.373117][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.387965][ T5622] usb 5-1: USB disconnect, device number 23 [ 652.994381][ T59] Bluetooth: hci2: connection err: -111 [ 653.173645][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 653.418914][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 653.686458][T12773] veth0_macvtap: entered promiscuous mode [ 653.715146][T12773] veth1_macvtap: entered promiscuous mode [ 653.754562][T12773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.760850][T12773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.793057][ T1847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.793302][ T1847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.793335][ T1847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.793365][ T1847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.515478][ T1847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.515499][ T1847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.736697][T13115] syzkaller0: entered promiscuous mode [ 654.736721][T13115] syzkaller0: entered allmulticast mode [ 654.846877][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.846890][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.072934][ T36] audit: type=1800 audit(1781205420.499:2): pid=13120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2366" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 655.292988][ T5622] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 655.454447][ T5622] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 655.493765][ T5622] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 655.493792][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.493808][ T5622] usb 3-1: Product: syz [ 655.493819][ T5622] usb 3-1: Manufacturer: syz [ 655.493837][ T5622] usb 3-1: SerialNumber: syz [ 656.522328][T13138] netlink: 'syz.0.2370': attribute type 10 has an invalid length. [ 656.576228][T13138] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.578865][T13138] bond0: (slave team0): Enslaving as an active interface with an up link [ 657.451176][T13131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 657.458312][T13131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 657.458528][T13131] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 658.617774][ T59] Bluetooth: hci5: connection err: -111 [ 659.316919][ T5622] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 659.316971][ T5622] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 659.316988][ T5622] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 659.400069][ T5622] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 659.427764][ T5622] usb 3-1: USB disconnect, device number 24 [ 659.501811][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 659.501859][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 659.501886][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 659.841194][T13159] syzkaller0: entered promiscuous mode [ 659.841211][T13159] syzkaller0: entered allmulticast mode [ 659.910332][T13163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 659.910699][T13163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 659.910928][T13163] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 661.971879][ T4916] Bluetooth: hci5: command 0x0c1a tx timeout [ 661.971917][ T4916] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.966131][T13186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 662.966239][T13186] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 663.021966][T13186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 663.022216][T13186] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 663.238338][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 663.272229][T13206] hsr_slave_0: left promiscuous mode [ 663.314711][T13206] hsr_slave_1: left promiscuous mode [ 663.581739][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 663.871594][ T5743] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 664.021570][ T5743] usb 3-1: Using ep0 maxpacket: 16 [ 664.059225][ T5743] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.059256][ T5743] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 664.059280][ T5743] usb 3-1: config 0 interface 0 has no altsetting 0 [ 664.059311][ T5743] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 664.059331][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.111626][ T5743] usb 3-1: config 0 descriptor?? [ 664.148960][ T5743] usbhid 3-1:0.0: can't add hid device: -22 [ 664.149069][ T5743] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 664.813572][T13229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 664.816450][T13229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 664.816751][T13229] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 664.936797][ T5745] usb 3-1: USB disconnect, device number 25 [ 665.661574][ T5745] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 665.831485][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 665.835373][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.835401][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.835438][ T5745] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 665.835457][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.865623][ T5745] usb 5-1: config 0 descriptor?? [ 665.893497][ T5745] hub 5-1:0.0: USB hub found [ 666.109683][ T5745] hub 5-1:0.0: 1 port detected [ 666.213595][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 666.727555][ T5745] hub 5-1:0.0: activate --> -90 [ 666.852684][ T9690] Bluetooth: hci1: command 0x0c1a tx timeout [ 666.852739][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 666.895379][T13255] syzkaller0: entered promiscuous mode [ 666.895404][T13255] syzkaller0: entered allmulticast mode [ 666.929047][ T5745] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 666.983098][ T8755] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 667.131544][ T8755] usb 3-1: Using ep0 maxpacket: 16 [ 667.136507][ T8755] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.136533][ T8755] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 667.136547][ T8755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 667.136565][ T8755] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 667.136576][ T8755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.145996][ T8755] usb 3-1: config 0 descriptor?? [ 667.184214][ T8755] usbhid 3-1:0.0: can't add hid device: -22 [ 667.184315][ T8755] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 667.241915][ T5745] usb 5-1: USB disconnect, device number 24 [ 667.893776][T13269] Driver unsupported XDP return value 0 on prog (id 192) dev N/A, expect packet loss! [ 668.185172][T13259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.185400][T13259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.207057][T13259] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 668.207158][T13259] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 668.246070][ T8755] usb 3-1: USB disconnect, device number 26 [ 669.050968][T13283] syzkaller0: entered promiscuous mode [ 669.050992][T13283] syzkaller0: entered allmulticast mode [ 669.344728][T13294] loop5: detected capacity change from 0 to 7 [ 669.366120][T13294] Dev loop5: unable to read RDB block 7 [ 669.366173][T13294] loop5: unable to read partition table [ 669.366377][T13294] loop5: partition table beyond EOD, truncated [ 669.366394][T13294] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 669.391522][ T5745] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 669.492841][ T9690] Bluetooth: hci2: command 0x0c1a tx timeout [ 669.562749][ T5745] usb 4-1: too many configurations: 53, using maximum allowed: 8 [ 669.624390][ T5745] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 669.624419][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.624437][ T5745] usb 4-1: Product: syz [ 669.624450][ T5745] usb 4-1: Manufacturer: syz [ 669.624463][ T5745] usb 4-1: SerialNumber: syz [ 670.212026][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.212079][ T9690] Bluetooth: hci5: command 0x0c1a tx timeout [ 670.259175][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 670.259207][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 670.259217][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 670.303548][ T5745] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 670.310855][ T5745] usb 4-1: USB disconnect, device number 29 [ 670.484203][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'. [ 670.702692][T13303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 670.703849][T13303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 670.704126][T13303] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 671.353512][T13321] syzkaller0: entered promiscuous mode [ 671.353529][T13321] syzkaller0: entered allmulticast mode [ 671.734285][T13336] syzkaller0: entered promiscuous mode [ 671.734310][T13336] syzkaller0: entered allmulticast mode [ 672.014208][ T5745] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 672.080992][ T9690] Bluetooth: hci2: command 0x0c1a tx timeout [ 672.181551][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 672.183859][ T5745] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.183888][ T5745] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 672.183914][ T5745] usb 5-1: config 0 interface 0 has no altsetting 0 [ 672.183944][ T5745] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 672.183964][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.212108][ T5745] usb 5-1: config 0 descriptor?? [ 672.225807][ T5745] usbhid 5-1:0.0: can't add hid device: -22 [ 672.225917][ T5745] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 672.343108][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2444'. [ 672.548563][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2444'. [ 672.581662][ T8756] usb 5-1: USB disconnect, device number 25 [ 672.771948][ T9690] Bluetooth: hci5: command 0x0c1a tx timeout [ 672.771976][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 672.803320][T13363] syzkaller0: entered promiscuous mode [ 672.803345][T13363] syzkaller0: entered allmulticast mode [ 673.221563][ T5745] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 673.374100][ T5745] usb 1-1: config index 0 descriptor too short (expected 137, got 72) [ 673.384507][ T5745] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 673.384535][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.384552][ T5745] usb 1-1: Product: syz [ 673.384565][ T5745] usb 1-1: Manufacturer: syz [ 673.384577][ T5745] usb 1-1: SerialNumber: syz [ 673.405733][ T5745] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 673.426761][ T820] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 673.711306][ T8756] usb 1-1: USB disconnect, device number 11 [ 674.082889][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 674.178781][T13390] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2452'. [ 674.256113][T13392] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 674.404202][T13396] netlink: 12712 bytes leftover after parsing attributes in process `syz.1.2452'. [ 674.614345][ T820] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 674.691810][ T820] ath9k_htc: Failed to initialize the device [ 674.692477][ T8756] usb 1-1: ath9k_htc: USB layer deinitialized [ 674.923602][T13403] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2454'. [ 674.978332][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2456'. [ 674.978483][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2456'. [ 675.431583][ T8756] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 675.594606][ T8756] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 675.594632][ T8756] usb 1-1: config 0 has no interface number 0 [ 675.594673][ T8756] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 675.594694][ T8756] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 675.595802][ T8756] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 675.595828][ T8756] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 675.595851][ T8756] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 675.595875][ T8756] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 675.595914][ T8756] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 675.595934][ T8756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.649649][T13417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2460'. [ 675.715055][ T8756] usb 1-1: config 0 descriptor?? [ 675.716269][T13411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 675.716438][T13411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 675.741505][ T8756] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 675.940929][ T8756] usb 1-1: USB disconnect, device number 12 [ 675.992911][ T8756] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 677.625784][T13430] syzkaller0: entered promiscuous mode [ 677.625809][T13430] syzkaller0: entered allmulticast mode [ 678.033879][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2468'. [ 678.033978][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2468'. [ 678.154878][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 678.504874][T13440] syzkaller0: entered promiscuous mode [ 678.504899][T13440] syzkaller0: entered allmulticast mode [ 679.712765][T13465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2481'. [ 679.712881][T13465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2481'. [ 679.891622][ T5836] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 679.995383][T13468] syzkaller0: entered promiscuous mode [ 679.995408][T13468] syzkaller0: entered allmulticast mode [ 680.053484][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 680.055316][ T5836] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.055335][ T5836] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 680.055348][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0 [ 680.055420][ T5836] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 680.055437][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.060785][ T5836] usb 1-1: config 0 descriptor?? [ 680.090344][ T5836] usbhid 1-1:0.0: can't add hid device: -22 [ 680.090451][ T5836] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 680.511589][ T5743] usb 1-1: USB disconnect, device number 13 [ 681.010176][T13477] netlink: 'syz.2.2485': attribute type 1 has an invalid length. [ 681.081587][ T5743] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 681.259574][ T5743] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 681.259591][ T5743] usb 5-1: config 0 has no interface number 0 [ 681.259614][ T5743] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 681.259629][ T5743] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 681.259642][ T5743] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 681.259654][ T5743] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 681.259666][ T5743] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 681.259679][ T5743] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 681.259700][ T5743] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 681.259711][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.389150][ T5743] usb 5-1: config 0 descriptor?? [ 681.390365][T13475] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 681.390480][T13475] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 681.439794][ T5743] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 681.823954][ T5836] usb 5-1: USB disconnect, device number 26 [ 681.943362][ T5836] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 682.900931][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2492'. [ 682.901120][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2492'. [ 683.559354][T13504] syzkaller0: entered promiscuous mode [ 683.559392][T13504] syzkaller0: entered allmulticast mode [ 683.741768][ T5743] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 683.900081][ T5743] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 683.900109][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 683.900127][ T5743] usb 1-1: Product: syz [ 683.900139][ T5743] usb 1-1: SerialNumber: syz [ 683.937633][ T5743] usb 1-1: config 0 descriptor?? [ 683.953349][ T5743] hso 1-1:0.0: Not our interface [ 684.211639][ T820] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 684.381548][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 684.384283][ T820] usb 4-1: config 14 has an invalid interface number: 5 but max is 3 [ 684.384307][ T820] usb 4-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 684.384325][ T820] usb 4-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 684.384342][ T820] usb 4-1: config 14 has an invalid interface number: 164 but max is 3 [ 684.384360][ T820] usb 4-1: config 14 has an invalid interface number: 229 but max is 3 [ 684.384379][ T820] usb 4-1: config 14 has an invalid interface number: 5 but max is 3 [ 684.384395][ T820] usb 4-1: config 14 has an invalid interface number: 248 but max is 3 [ 684.384412][ T820] usb 4-1: config 14 has no interface number 0 [ 684.384426][ T820] usb 4-1: config 14 has no interface number 1 [ 684.384440][ T820] usb 4-1: config 14 has no interface number 2 [ 684.384453][ T820] usb 4-1: config 14 has no interface number 3 [ 684.384525][ T820] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 684.384550][ T820] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 684.384571][ T820] usb 4-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 684.384591][ T820] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 684.384691][ T820] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 684.384718][ T820] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 684.384737][ T820] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 684.384757][ T820] usb 4-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 684.384778][ T820] usb 4-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 684.384800][ T820] usb 4-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 684.384833][ T820] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 684.384854][ T820] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 684.384883][ T820] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 684.384903][ T820] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 684.384923][ T820] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 684.384942][ T820] usb 4-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 684.384966][ T820] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 684.384985][ T820] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 684.385006][ T820] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 684.385026][ T820] usb 4-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 684.385045][ T820] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 684.385063][ T820] usb 4-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 684.385083][ T820] usb 4-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 684.385105][ T820] usb 4-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 684.385124][ T820] usb 4-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 684.385159][ T820] usb 4-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 684.385195][ T820] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 684.385214][ T820] usb 4-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 684.385237][ T820] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 684.385255][ T820] usb 4-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 684.385274][ T820] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 684.385293][ T820] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 684.385312][ T820] usb 4-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 684.385331][ T820] usb 4-1: config 14 interface 5 has no altsetting 0 [ 684.385345][ T820] usb 4-1: config 14 interface 5 has no altsetting 1 [ 684.385360][ T820] usb 4-1: config 14 interface 164 has no altsetting 0 [ 684.385375][ T820] usb 4-1: config 14 interface 229 has no altsetting 0 [ 684.385390][ T820] usb 4-1: config 14 interface 248 has no altsetting 0 [ 684.415875][ T820] usb 4-1: Dual-Role OTG device on HNP port [ 684.416183][ T820] usb 4-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 684.416206][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.416223][ T820] usb 4-1: SerialNumber: Ь [ 684.442021][T13513] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 684.825802][ T820] usb 4-1: USB disconnect, device number 30 [ 684.971125][T13528] fuse: Invalid rootmode [ 684.980678][ T5836] usb 1-1: USB disconnect, device number 14 [ 685.746328][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.746396][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.866705][T13548] syzkaller0: entered promiscuous mode [ 685.866730][T13548] syzkaller0: entered allmulticast mode [ 686.081617][ T5743] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 686.251598][ T5743] usb 2-1: Using ep0 maxpacket: 16 [ 686.254737][ T5743] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.254767][ T5743] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 686.254791][ T5743] usb 2-1: config 0 interface 0 has no altsetting 0 [ 686.254819][ T5743] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 686.254839][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.260107][ T5743] usb 2-1: config 0 descriptor?? [ 686.362837][ T5743] usbhid 2-1:0.0: can't add hid device: -22 [ 686.362937][ T5743] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 686.605998][T13546] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 686.721879][ T820] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 686.765455][ T8756] usb 2-1: USB disconnect, device number 27 [ 686.871557][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 686.881045][ T820] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.881076][ T820] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 686.881101][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 686.881131][ T820] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 686.881151][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.891148][ T820] usb 5-1: config 0 descriptor?? [ 686.898849][ T820] usbhid 5-1:0.0: can't add hid device: -22 [ 686.899059][ T820] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 686.931793][ T5743] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 687.081580][ T5743] usb 3-1: Using ep0 maxpacket: 16 [ 687.083891][ T5743] usb 3-1: config 14 has an invalid interface number: 5 but max is 3 [ 687.083914][ T5743] usb 3-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 687.083932][ T5743] usb 3-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 687.083948][ T5743] usb 3-1: config 14 has an invalid interface number: 164 but max is 3 [ 687.083966][ T5743] usb 3-1: config 14 has an invalid interface number: 229 but max is 3 [ 687.083983][ T5743] usb 3-1: config 14 has an invalid interface number: 5 but max is 3 [ 687.083999][ T5743] usb 3-1: config 14 has an invalid interface number: 248 but max is 3 [ 687.084017][ T5743] usb 3-1: config 14 has no interface number 0 [ 687.084029][ T5743] usb 3-1: config 14 has no interface number 1 [ 687.084036][ T5743] usb 3-1: config 14 has no interface number 2 [ 687.084043][ T5743] usb 3-1: config 14 has no interface number 3 [ 687.084086][ T5743] usb 3-1: config 14 interface 5 altsetting 89 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 687.084099][ T5743] usb 3-1: config 14 interface 5 altsetting 89 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 687.084112][ T5743] usb 3-1: config 14 interface 5 altsetting 89 bulk endpoint 0x2 has invalid maxpacket 32 [ 687.084132][ T5743] usb 3-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 687.084146][ T5743] usb 3-1: config 14 interface 5 altsetting 89 endpoint 0x8 has invalid maxpacket 43070, setting to 64 [ 687.084159][ T5743] usb 3-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 687.084169][ T5743] usb 3-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 687.084180][ T5743] usb 3-1: config 14 interface 5 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 687.084191][ T5743] usb 3-1: config 14 interface 5 altsetting 89 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 687.084203][ T5743] usb 3-1: config 14 interface 5 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 687.084227][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 687.084237][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x9, skipping [ 687.084247][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 687.084258][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 687.084268][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 687.084278][ T5743] usb 3-1: config 14 interface 229 altsetting 191 endpoint 0xE has an invalid bInterval 255, changing to 7 [ 687.084290][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 687.084301][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0x1, skipping [ 687.084312][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 687.084323][ T5743] usb 3-1: config 14 interface 229 altsetting 191 endpoint 0xB has invalid wMaxPacketSize 0 [ 687.084334][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 687.084343][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 687.084354][ T5743] usb 3-1: config 14 interface 229 altsetting 191 bulk endpoint 0xA has invalid maxpacket 32 [ 687.084365][ T5743] usb 3-1: config 14 interface 229 altsetting 191 has a duplicate endpoint with address 0xA, skipping [ 687.084376][ T5743] usb 3-1: too many endpoints for config 14 interface 5 altsetting 144: 106, using maximum allowed: 30 [ 687.084394][ T5743] usb 3-1: config 14 interface 5 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 687.084414][ T5743] usb 3-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 687.084424][ T5743] usb 3-1: config 14 interface 248 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 687.084436][ T5743] usb 3-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 687.084446][ T5743] usb 3-1: config 14 interface 248 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 687.084456][ T5743] usb 3-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 687.084466][ T5743] usb 3-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 687.084482][ T5743] usb 3-1: config 14 interface 248 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 687.084492][ T5743] usb 3-1: config 14 interface 5 has no altsetting 0 [ 687.084500][ T5743] usb 3-1: config 14 interface 5 has no altsetting 1 [ 687.084508][ T5743] usb 3-1: config 14 interface 164 has no altsetting 0 [ 687.084516][ T5743] usb 3-1: config 14 interface 229 has no altsetting 0 [ 687.084525][ T5743] usb 3-1: config 14 interface 248 has no altsetting 0 [ 687.089508][ T5743] usb 3-1: Dual-Role OTG device on HNP port [ 687.089810][ T5743] usb 3-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=fc.37 [ 687.089833][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.089850][ T5743] usb 3-1: SerialNumber: Ь [ 687.269884][T13563] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 687.388996][ T820] usb 5-1: USB disconnect, device number 27 [ 687.673539][ T5743] usb 3-1: USB disconnect, device number 27 [ 688.338499][T13587] syzkaller0: entered promiscuous mode [ 688.338515][T13587] syzkaller0: entered allmulticast mode [ 690.278826][ T5745] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 690.433462][ T5745] usb 4-1: Using ep0 maxpacket: 16 [ 690.435536][ T5745] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.435565][ T5745] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 690.435590][ T5745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 690.435622][ T5745] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 690.435642][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.483361][ T5745] usb 4-1: config 0 descriptor?? [ 690.502157][ T5745] usbhid 4-1:0.0: can't add hid device: -22 [ 690.503717][ T5745] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 690.825220][ T5745] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 690.896586][ T8756] usb 4-1: USB disconnect, device number 31 [ 690.981607][ T5745] usb 3-1: Using ep0 maxpacket: 16 [ 690.984414][ T5745] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.984443][ T5745] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 690.984464][ T5745] usb 3-1: config 0 interface 0 has no altsetting 0 [ 690.984484][ T5745] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 690.984495][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.992372][ T5745] usb 3-1: config 0 descriptor?? [ 691.027282][ T5745] usbhid 3-1:0.0: can't add hid device: -22 [ 691.027390][ T5745] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 691.191554][ T5743] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 691.364005][ T5743] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 691.364033][ T5743] usb 2-1: config 0 has no interface number 0 [ 691.364077][ T5743] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 691.364097][ T5743] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 691.364120][ T5743] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 691.364141][ T5743] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 691.364165][ T5743] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 691.364187][ T5743] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 691.364226][ T5743] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 691.364247][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.375561][ T5743] usb 2-1: config 0 descriptor?? [ 691.415072][T13625] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.415209][T13625] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.513805][ T5743] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 691.516047][T13627] [ 691.516057][T13627] ============================================ [ 691.516065][T13627] WARNING: possible recursive locking detected [ 691.516078][T13627] syzkaller #0 Not tainted [ 691.516088][T13627] -------------------------------------------- [ 691.516094][T13627] syz.2.2535/13627 is trying to acquire lock: [ 691.516105][T13627] ffffffff8[ 691.516105][T13627] ffffffff8e9558e8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf10 [ 691.516343][T13627] [ 691.516343][T13627] but task is already holding lock: [ 691.516350][T13627] ffffffff8e9558e8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf10 [ 691.516391][T13627] [ 691.516391][T13627] other info that might help us debug this: [ 691.516397][T13627] Possible unsafe locking scenario: [ 691.516397][T13627] [ 691.516403][T13627] CPU0 [ 691.516407][T13627] ---- [ 691.516411][T13627] lock(qp_broker_list.mutex); [ 691.516422][T13627] lock(qp_broker_list.mutex); [ 691.516433][T13627] [ 691.516433][T13627] *** DEADLOCK *** [ 691.516433][T13627] [ 691.516437][T13627] May be due to missing lock nesting notation [ 691.516437][T13627] [ 691.516442][T13627] 1 lock held by syz.2.2535/13627: [ 691.516451][T13627] #0: ffffffff8e9558e8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf10 [ 691.516490][T13627] [ 691.516490][T13627] stack backtrace: [ 691.516508][T13627] CPU: 1 UID: 0 PID: 13627 Comm: syz.2.2535 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 691.516528][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.516544][T13627] Call Trace: [ 691.516551][T13627] [ 691.516558][T13627] dump_stack_lvl+0xe8/0x150 [ 691.516608][T13627] print_deadlock_bug+0x279/0x290 [ 691.516715][T13627] __lock_acquire+0x253f/0x2cf0 [ 691.516746][T13627] ? lockdep_hardirqs_on+0x7a/0x110 [ 691.516863][T13627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.516921][T13627] ? stack_depot_save_flags+0x3f3/0x810 [ 691.517017][T13627] ? kasan_save_track+0x4f/0x80 [ 691.517149][T13627] ? kasan_save_track+0x3e/0x80 [ 691.517166][T13627] ? kasan_save_free_info+0x46/0x50 [ 691.517189][T13627] ? __kasan_slab_free+0x5c/0x80 [ 691.517210][T13627] ? vmci_qp_broker_detach+0x117/0xf10 [ 691.517233][T13627] lock_acquire+0x106/0x350 [ 691.517254][T13627] ? vmci_qp_broker_detach+0x117/0xf10 [ 691.517288][T13627] ? vmci_qp_broker_detach+0x117/0xf10 [ 691.517313][T13627] ? vmci_qp_broker_detach+0x117/0xf10 [ 691.517335][T13627] mutex_lock_nested+0x5a/0x1d0 [ 691.517355][T13627] ? vmci_qp_broker_detach+0x117/0xf10 [ 691.517380][T13627] vmci_qp_broker_detach+0x117/0xf10 [ 691.517408][T13627] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 691.517430][T13627] ? kasan_quarantine_put+0xbb/0x1f0 [ 691.517483][T13627] ? lockdep_hardirqs_on+0x7a/0x110 [ 691.517509][T13627] ? kfree+0x1c5/0x6c0 [ 691.517554][T13627] ? vmci_ctx_put+0x5ef/0xc40 [ 691.517570][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.517588][T13627] vmci_ctx_put+0x64e/0xc40 [ 691.517604][T13627] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 691.517628][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.517645][T13627] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 691.517666][T13627] ? __pfx_vmci_ctx_put+0x10/0x10 [ 691.517683][T13627] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 691.517705][T13627] ? rt_spin_unlock+0x160/0x200 [ 691.517725][T13627] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 691.517747][T13627] vmci_datagram_dispatch+0x450/0xc60 [ 691.517765][T13627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.517789][T13627] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 691.517809][T13627] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 691.517830][T13627] vmci_qp_broker_detach+0x8d4/0xf10 [ 691.517857][T13627] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 691.517879][T13627] ? kasan_quarantine_put+0xbb/0x1f0 [ 691.517899][T13627] ? kfree+0x1c5/0x6c0 [ 691.517914][T13627] ? vmci_ctx_put+0x5ef/0xc40 [ 691.517930][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.517947][T13627] vmci_ctx_put+0x64e/0xc40 [ 691.517962][T13627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.517986][T13627] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 691.518006][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.518024][T13627] ? __pfx_vmci_ctx_put+0x10/0x10 [ 691.518047][T13627] vmci_host_close+0x9b/0x160 [ 691.518069][T13627] ? __pfx_vmci_host_close+0x10/0x10 [ 691.518090][T13627] __fput+0x461/0xa70 [ 691.518160][T13627] task_work_run+0x1d9/0x270 [ 691.518200][T13627] ? __pfx_task_work_run+0x10/0x10 [ 691.518224][T13627] exit_to_user_mode_loop+0x193/0x680 [ 691.518324][T13627] ? rcu_is_watching+0x15/0xb0 [ 691.518395][T13627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.518429][T13627] do_syscall_64+0x353/0x580 [ 691.518477][T13627] ? trace_irq_disable+0x3b/0x140 [ 691.518537][T13627] ? clear_bhb_loop+0x40/0x90 [ 691.518557][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.518580][T13627] RIP: 0033:0x7f20fa79ce59 [ 691.518601][T13627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.518617][T13627] RSP: 002b:00007f20f89cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 691.518637][T13627] RAX: 0000000000000000 RBX: 00007f20faa16090 RCX: 00007f20fa79ce59 [ 691.518649][T13627] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 691.518661][T13627] RBP: 00007f20fa832d6f R08: 0000000000000000 R09: 0000000000000000 [ 691.518673][T13627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.518683][T13627] R13: 00007f20faa16128 R14: 00007f20faa16090 R15: 00007ffecd253418 [ 691.518702][T13627] [ 691.561541][T13627] ------------[ cut here ]------------ [ 691.561554][T13627] rtmutex deadlock detected [ 691.561565][T13627] WARNING: kernel/locking/rtmutex.c:1693 at rt_mutex_handle_deadlock+0x21/0xb0, CPU#0: syz.2.2535/13627 [ 691.561608][T13627] Modules linked in: [ 691.561624][T13627] CPU: 0 UID: 0 PID: 13627 Comm: syz.2.2535 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 691.561644][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.561655][T13627] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 691.561677][T13627] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 26 3b 01 00 48 8d 3d 9f c6 6d 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 23 aa 4b 07 4c 8d [ 691.561694][T13627] RSP: 0018:ffffc900074c7430 EFLAGS: 00010286 [ 691.561710][T13627] RAX: 0000000080000000 RBX: ffffc900074c74c0 RCX: 0000000000000000 [ 691.561722][T13627] RDX: 0000000000000000 RSI: ffffffff8ba75cc0 RDI: ffffffff8f8bac70 [ 691.561749][T13627] RBP: ffffc900074c75e0 R08: ffffffff8f8870f7 R09: 1ffffffff1f10e1e [ 691.561770][T13627] R10: dffffc0000000000 R11: fffffbfff1f10e1f R12: 1ffff92000e98e94 [ 691.561784][T13627] R13: ffffffff8b1de01d R14: ffffffff8e955890 R15: dffffc0000000000 [ 691.561798][T13627] FS: 00007f20f89cd6c0(0000) GS:ffff888126187000(0000) knlGS:0000000000000000 [ 691.561814][T13627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.561827][T13627] CR2: 0000001b32f0dff8 CR3: 0000000025ac8000 CR4: 00000000003526f0 [ 691.561843][T13627] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff [ 691.561856][T13627] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 691.561869][T13627] Call Trace: [ 691.561876][T13627] [ 691.561883][T13627] ? rt_mutex_slowlock+0x1fd/0x780 [ 691.561903][T13627] rt_mutex_slowlock+0x73a/0x780 [ 691.561925][T13627] ? rt_mutex_slowlock+0x1fd/0x780 [ 691.561945][T13627] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 691.561972][T13627] ? lock_acquire+0x221/0x350 [ 691.561998][T13627] ? vmci_qp_broker_detach+0x117/0xf10 [ 691.562022][T13627] mutex_lock_nested+0x168/0x1d0 [ 691.562043][T13627] vmci_qp_broker_detach+0x117/0xf10 [ 691.562070][T13627] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 691.562092][T13627] ? kasan_quarantine_put+0xbb/0x1f0 [ 691.562110][T13627] ? lockdep_hardirqs_on+0x7a/0x110 [ 691.562136][T13627] ? kfree+0x1c5/0x6c0 [ 691.562152][T13627] ? vmci_ctx_put+0x5ef/0xc40 [ 691.562167][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.562183][T13627] vmci_ctx_put+0x64e/0xc40 [ 691.562200][T13627] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 691.562224][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.562240][T13627] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 691.562260][T13627] ? __pfx_vmci_ctx_put+0x10/0x10 [ 691.562277][T13627] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 691.562301][T13627] ? rt_spin_unlock+0x160/0x200 [ 691.562321][T13627] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 691.562342][T13627] vmci_datagram_dispatch+0x450/0xc60 [ 691.562360][T13627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.562385][T13627] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 691.562404][T13627] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 691.562427][T13627] vmci_qp_broker_detach+0x8d4/0xf10 [ 691.562454][T13627] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 691.562476][T13627] ? kasan_quarantine_put+0xbb/0x1f0 [ 691.562494][T13627] ? kfree+0x1c5/0x6c0 [ 691.562509][T13627] ? vmci_ctx_put+0x5ef/0xc40 [ 691.562524][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.562542][T13627] vmci_ctx_put+0x64e/0xc40 [ 691.562557][T13627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.562581][T13627] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 691.562600][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.562617][T13627] ? __pfx_vmci_ctx_put+0x10/0x10 [ 691.562638][T13627] vmci_host_close+0x9b/0x160 [ 691.562658][T13627] ? __pfx_vmci_host_close+0x10/0x10 [ 691.562679][T13627] __fput+0x461/0xa70 [ 691.562699][T13627] task_work_run+0x1d9/0x270 [ 691.562724][T13627] ? __pfx_task_work_run+0x10/0x10 [ 691.562749][T13627] exit_to_user_mode_loop+0x193/0x680 [ 691.562778][T13627] ? rcu_is_watching+0x15/0xb0 [ 691.562802][T13627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.562821][T13627] do_syscall_64+0x353/0x580 [ 691.562844][T13627] ? trace_irq_disable+0x3b/0x140 [ 691.562863][T13627] ? clear_bhb_loop+0x40/0x90 [ 691.562882][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.562898][T13627] RIP: 0033:0x7f20fa79ce59 [ 691.562914][T13627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.562928][T13627] RSP: 002b:00007f20f89cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 691.562964][T13627] RAX: 0000000000000000 RBX: 00007f20faa16090 RCX: 00007f20fa79ce59 [ 691.562978][T13627] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 691.562990][T13627] RBP: 00007f20fa832d6f R08: 0000000000000000 R09: 0000000000000000 [ 691.563002][T13627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.563013][T13627] R13: 00007f20faa16128 R14: 00007f20faa16090 R15: 00007ffecd253418 [ 691.563034][T13627] [ 691.563052][T13627] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 691.563066][T13627] CPU: 0 UID: 0 PID: 13627 Comm: syz.2.2535 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 691.563086][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.563097][T13627] Call Trace: [ 691.563104][T13627] [ 691.563111][T13627] vpanic+0x56c/0xa60 [ 691.563165][T13627] ? __pfx__printk+0x10/0x10 [ 691.563207][T13627] ? __pfx_vpanic+0x10/0x10 [ 691.563226][T13627] ? is_bpf_text_address+0x292/0x2b0 [ 691.563327][T13627] ? is_bpf_text_address+0x26/0x2b0 [ 691.563352][T13627] panic+0xc5/0xd0 [ 691.563371][T13627] ? __pfx_panic+0x10/0x10 [ 691.563397][T13627] __warn+0x315/0x4c0 [ 691.563416][T13627] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 691.563438][T13627] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 691.563458][T13627] __report_bug+0x29a/0x540 [ 691.563553][T13627] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 691.563574][T13627] ? __pfx___report_bug+0x10/0x10 [ 691.563601][T13627] ? __show_trace_log_lvl+0x478/0x550 [ 691.563622][T13627] report_bug_entry+0x19a/0x290 [ 691.563650][T13627] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 691.563669][T13627] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 691.563689][T13627] handle_bug+0xce/0x200 [ 691.563706][T13627] exc_invalid_op+0x1a/0x50 [ 691.563723][T13627] asm_exc_invalid_op+0x1a/0x20 [ 691.563740][T13627] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 691.563769][T13627] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 26 3b 01 00 48 8d 3d 9f c6 6d 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 23 aa 4b 07 4c 8d [ 691.563785][T13627] RSP: 0018:ffffc900074c7430 EFLAGS: 00010286 [ 691.563801][T13627] RAX: 0000000080000000 RBX: ffffc900074c74c0 RCX: 0000000000000000 [ 691.563814][T13627] RDX: 0000000000000000 RSI: ffffffff8ba75cc0 RDI: ffffffff8f8bac70 [ 691.563826][T13627] RBP: ffffc900074c75e0 R08: ffffffff8f8870f7 R09: 1ffffffff1f10e1e [ 691.563841][T13627] R10: dffffc0000000000 R11: fffffbfff1f10e1f R12: 1ffff92000e98e94 [ 691.563855][T13627] R13: ffffffff8b1de01d R14: ffffffff8e955890 R15: dffffc0000000000 [ 691.563871][T13627] ? rt_mutex_slowlock+0x1fd/0x780 [ 691.563898][T13627] ? rt_mutex_slowlock+0x1fd/0x780 [ 691.563916][T13627] rt_mutex_slowlock+0x73a/0x780 [ 691.563938][T13627] ? rt_mutex_slowlock+0x1fd/0x780 [ 691.563959][T13627] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 691.563986][T13627] ? lock_acquire+0x221/0x350 [ 691.564008][T13627] ? vmci_qp_broker_detach+0x117/0xf10 [ 691.564031][T13627] mutex_lock_nested+0x168/0x1d0 [ 691.564053][T13627] vmci_qp_broker_detach+0x117/0xf10 [ 691.564079][T13627] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 691.564101][T13627] ? kasan_quarantine_put+0xbb/0x1f0 [ 691.564118][T13627] ? lockdep_hardirqs_on+0x7a/0x110 [ 691.564145][T13627] ? kfree+0x1c5/0x6c0 [ 691.564161][T13627] ? vmci_ctx_put+0x5ef/0xc40 [ 691.564176][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.564194][T13627] vmci_ctx_put+0x64e/0xc40 [ 691.564210][T13627] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 691.564234][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.564251][T13627] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 691.564271][T13627] ? __pfx_vmci_ctx_put+0x10/0x10 [ 691.564289][T13627] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 691.564312][T13627] ? rt_spin_unlock+0x160/0x200 [ 691.564333][T13627] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 691.564354][T13627] vmci_datagram_dispatch+0x450/0xc60 [ 691.564372][T13627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.564398][T13627] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 691.564417][T13627] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 691.564440][T13627] vmci_qp_broker_detach+0x8d4/0xf10 [ 691.564467][T13627] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 691.564489][T13627] ? kasan_quarantine_put+0xbb/0x1f0 [ 691.564509][T13627] ? kfree+0x1c5/0x6c0 [ 691.564523][T13627] ? vmci_ctx_put+0x5ef/0xc40 [ 691.564538][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.564554][T13627] vmci_ctx_put+0x64e/0xc40 [ 691.564570][T13627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.564594][T13627] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 691.564615][T13627] ? vmci_ctx_put+0x141/0xc40 [ 691.564632][T13627] ? __pfx_vmci_ctx_put+0x10/0x10 [ 691.564655][T13627] vmci_host_close+0x9b/0x160 [ 691.564676][T13627] ? __pfx_vmci_host_close+0x10/0x10 [ 691.564698][T13627] __fput+0x461/0xa70 [ 691.564718][T13627] task_work_run+0x1d9/0x270 [ 691.564742][T13627] ? __pfx_task_work_run+0x10/0x10 [ 691.564777][T13627] exit_to_user_mode_loop+0x193/0x680 [ 691.564799][T13627] ? rcu_is_watching+0x15/0xb0 [ 691.564822][T13627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.564840][T13627] do_syscall_64+0x353/0x580 [ 691.564863][T13627] ? trace_irq_disable+0x3b/0x140 [ 691.564882][T13627] ? clear_bhb_loop+0x40/0x90 [ 691.564901][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.564918][T13627] RIP: 0033:0x7f20fa79ce59 [ 691.564933][T13627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.564948][T13627] RSP: 002b:00007f20f89cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 691.564965][T13627] RAX: 0000000000000000 RBX: 00007f20faa16090 RCX: 00007f20fa79ce59 [ 691.564978][T13627] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 691.564990][T13627] RBP: 00007f20fa832d6f R08: 0000000000000000 R09: 0000000000000000 [ 691.565002][T13627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.565013][T13627] R13: 00007f20faa16128 R14: 00007f20faa16090 R15: 00007ffecd253418 [ 691.565035][T13627] [ 691.565190][T13627] Kernel Offset: disabled