last executing test programs: 47.718799724s ago: executing program 3 (id=2900): openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x180, 0x380, 0x0}) 47.40635145s ago: executing program 3 (id=2903): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000030000"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0xb, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r4, 0x0, 0x10002) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) timerfd_create(0x0, 0x80000) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 45.628306178s ago: executing program 3 (id=2905): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x4, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0xfffffffd}, 0x1c) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000c40)='encrypted\x00', 0x0, &(0x7f0000000cc0)='[,\v]@+\x00', 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a600000001d0a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x20000084) 43.35676928s ago: executing program 3 (id=2910): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) unshare(0x6020400) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 42.637401056s ago: executing program 3 (id=2912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x43, &(0x7f00000000c0)=0x7, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 42.246825575s ago: executing program 3 (id=2916): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x12) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/prev\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x9, "7f8242bb1d9f006914b3bdba5ab66edbfa7833cdb9f1be47697d7acc2f905cbb"}) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004600)=""/102400, 0x19000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000000)=[{0x0}], 0x1) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) socket$netlink(0x10, 0x3, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000001c0)={0x0, 0x34, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 41.75990187s ago: executing program 32 (id=2916): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x12) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/prev\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x9, "7f8242bb1d9f006914b3bdba5ab66edbfa7833cdb9f1be47697d7acc2f905cbb"}) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004600)=""/102400, 0x19000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000000)=[{0x0}], 0x1) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) socket$netlink(0x10, 0x3, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000001c0)={0x0, 0x34, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 21.57792497s ago: executing program 0 (id=2961): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 18.566095939s ago: executing program 0 (id=2969): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x111, 0x5, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) 17.329782731s ago: executing program 0 (id=2971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x4050) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x9, 0x80}}}, 0xb8}}, 0x0) timerfd_create(0x3, 0x80800) 17.320296291s ago: executing program 2 (id=2972): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x200000000000008, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 17.114240561s ago: executing program 2 (id=2974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x66ef, &(0x7f0000001380)={0x0, 0x737b, 0x80, 0x0, 0x311}, &(0x7f0000000140), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000063c0)=[{0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000001400)=""/87, 0x57}], &(0x7f0000001300)=[0x8001, 0x5, 0x5, 0xfffffffffffffff8, 0xe, 0x9]}, {0x3, 0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001480)=""/183, 0xb7}, {&(0x7f0000001540)=""/167, 0xa7}, {&(0x7f0000001600)=""/201, 0xc9}], &(0x7f0000002780)=[0x8, 0x2, 0x9250, 0x1, 0x9, 0x0]}, {0x7, 0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/112, 0x70}, {&(0x7f0000003840)=""/79, 0x4f}, {&(0x7f00000038c0)=""/210, 0xd2}, {&(0x7f00000039c0)=""/128, 0x80}, {&(0x7f0000003a40)=""/138, 0x8a}, {&(0x7f0000003b00)=""/91, 0x5b}], &(0x7f0000003c00)=[0x4724, 0x8, 0xc6, 0x6, 0xfffffffffffffffa, 0xfa, 0x9c]}, {0x8, 0x1, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003c40)=""/40, 0x28}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/21, 0x15}, {&(0x7f0000004cc0)=""/111, 0x6f}, {&(0x7f0000004d40)=""/36, 0x24}, {&(0x7f0000004d80)=""/111, 0x6f}, {&(0x7f0000004e00)=""/89, 0x59}, {&(0x7f0000004e80)=""/233, 0xe9}], &(0x7f0000005000)=[0x6, 0x0, 0x3, 0x4]}, {0x6, 0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005040)=""/213, 0xd5}, {&(0x7f0000005140)=""/120, 0x78}, {&(0x7f00000051c0)=""/188, 0xbc}, {&(0x7f0000005280)=""/21, 0x15}, {&(0x7f00000052c0)=""/53, 0x35}, {&(0x7f0000005300)=""/4096, 0x1000}], &(0x7f0000006380)=[0x7, 0x100, 0x8000000000000000, 0xfffffffffffffffb, 0xfff, 0x80]}], 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0x37) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 15.166985238s ago: executing program 2 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 14.873953202s ago: executing program 0 (id=2978): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000180)=""/133, 0x85) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000dfc000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 13.166431877s ago: executing program 0 (id=2982): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x111, 0x5, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) 12.600712985s ago: executing program 5 (id=2983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 12.567419237s ago: executing program 0 (id=2984): socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYBLOB="3126e0dd9db049f4f81b9b14996e83b8f5665c5ecd61ee1064bc1a5917b3fcba93e20280dac03fd5d71515a12d02fbe9aad92cc1a4de96c10c038f1205b15b5d8599e1e5266b98682642ccf67db4b69a2713c9f4a6528b94a7621bc18099293d75ae7f98e6a2e2eca50a5bf2031e847d4f294918ff928b2ab955290722749558b988c7ca010ab6ba701fa29ffd5d408191376a2643385046fe22da8f2b4316a6995724d88bb46fab8413fa76be0726672b7aca7ff764c1fe13542a467fa9bdf817ecefaf", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r1, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000030000000400000000000000", @ANYRES32=r1, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = semget(0x0, 0x4, 0x39c) semop(r2, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 11.790449335s ago: executing program 2 (id=2985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 11.627493044s ago: executing program 5 (id=2987): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x7, 0x6, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0xfffffffe}, 0x50) r2 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x40810) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = gettid() rt_sigqueueinfo(r7, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) mq_open(&(0x7f0000000100)='-+\x00', 0x40, 0x0, &(0x7f0000000180)={0xa2, 0x0, 0x3, 0xf4}) 8.853200691s ago: executing program 1 (id=2994): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x111, 0x5, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) 8.138489076s ago: executing program 1 (id=2996): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1000, 0x2) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc09, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) read(r3, &(0x7f0000000300)=""/163, 0xa3) sendto$inet6(r4, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) 7.188062293s ago: executing program 5 (id=2998): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 7.013536422s ago: executing program 1 (id=2999): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="04131505"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = open(0x0, 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 5.712786897s ago: executing program 1 (id=3000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x20}], 0x1}, 0x4) 4.885858518s ago: executing program 2 (id=3002): ptrace(0x4206, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket(0x2b, 0x1, 0x100) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x80, 0x8002, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x2}}) io_uring_enter(r0, 0x6e2, 0x620, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x155f, 0x800, 0xffbffffc, 0x329}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) 4.272430728s ago: executing program 4 (id=3003): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a5", 0x6b}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {0x0}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1", 0x8a}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.980670163s ago: executing program 4 (id=3004): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x4, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 3.41723938s ago: executing program 5 (id=3005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 3.265820368s ago: executing program 1 (id=3006): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000003c0), 0x0) syz_io_uring_setup(0x3f77, &(0x7f0000000140)={0x0, 0x6d89, 0x40, 0x3, 0x2000105}, &(0x7f0000000400), &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="22819769ed060000000000", 0xb) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.068211738s ago: executing program 4 (id=3007): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c15, &(0x7f0000000240)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x10, 0x75, 0x9, 0x3c, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x80000000, 0x3}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)={0x244, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000085) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') 2.41025696s ago: executing program 4 (id=3008): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x84) pread64(r0, 0x0, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1.272264277s ago: executing program 4 (id=3009): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x5, 0x0, 0x0, @msi={0x3, 0x40, 0x5ed5e3c, 0x4e32cf73}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0x21, 0x2, 0x2) syz_emit_ethernet(0xa7, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x6630, @mcast2, 0x4}}, 0x80, 0x0}, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x18}, 0x0) 792.855091ms ago: executing program 4 (id=3010): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0xffffffffffff8000, 0xffffffff80000000, 0x0, 0x0, 0x8, 0x7}) 694.344205ms ago: executing program 1 (id=3011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 383.011051ms ago: executing program 5 (id=3012): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 162.551042ms ago: executing program 2 (id=3013): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x0, 0x1, 0x3, 0x4}}, 0x80, 0x0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x12) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 5 (id=3014): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) kernel console output (not intermixed with test programs): 55.667364][T10898] loop2: partition table beyond EOD, truncated [ 555.711280][T10898] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 555.821393][ T5056] usb 3-1: Using ep0 maxpacket: 16 [ 555.961572][ T5056] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 555.996876][ T5056] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 556.036518][ T5056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.084488][ T5056] usb 3-1: config 0 descriptor?? [ 556.617071][T10914] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 556.622659][T10914] PKCS7: Only support pkcs7_signedData type [ 556.631897][ T1107] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 557.333999][ T5056] dragonrise 0003:0079:0011.002A: unknown main item tag 0x0 [ 557.371506][ T5056] dragonrise 0003:0079:0011.002A: unknown main item tag 0x0 [ 557.483648][ T5056] dragonrise 0003:0079:0011.002A: unknown main item tag 0x0 [ 557.502250][ T5056] dragonrise 0003:0079:0011.002A: unknown main item tag 0x0 [ 557.511672][ T5056] dragonrise 0003:0079:0011.002A: unknown main item tag 0x0 [ 557.519170][ T5056] dragonrise 0003:0079:0011.002A: unknown main item tag 0x0 [ 557.542704][ T5056] dragonrise 0003:0079:0011.002A: item fetching failed at offset 9/44 [ 557.553157][ T5056] dragonrise 0003:0079:0011.002A: parse failed [ 557.559641][ T5056] dragonrise: probe of 0003:0079:0011.002A failed with error -22 [ 557.561365][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 557.613213][ T5056] usb 3-1: USB disconnect, device number 28 [ 557.741509][ T1107] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.843299][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0 [ 557.876377][ T1107] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 557.950403][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.029703][ T1107] usb 5-1: config 0 descriptor?? [ 559.181670][ T1107] hid-generic 0003:1E71:2009.002B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 559.283465][ T5070] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 559.361227][ T1107] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 559.543918][ T5197] usb 5-1: USB disconnect, device number 18 [ 559.553439][ T5070] usb 3-1: Using ep0 maxpacket: 16 [ 559.671592][ T5070] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.704488][ T5070] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.734190][ T5070] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 559.780715][ T5070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.811319][ T1107] usb 2-1: No LPM exit latency info found, disabling LPM. [ 559.848031][ T5070] usb 3-1: config 0 descriptor?? [ 561.145981][ T5070] hid-generic 0003:1E71:2009.002C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 561.315190][ T5070] usb 3-1: USB disconnect, device number 29 [ 561.376856][T10938] fido_id[10938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 561.411764][ T1107] usb 2-1: config 172 has an invalid interface number: 190 but max is 1 [ 561.420144][ T1107] usb 2-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 561.440992][ T1107] usb 2-1: config 172 has no interface number 1 [ 561.461106][ T1107] usb 2-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 561.472539][ T1107] usb 2-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 561.631211][ T5061] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 561.741501][ T1107] usb 2-1: string descriptor 0 read error: -22 [ 561.747787][ T1107] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 561.759185][ T4439] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 561.767449][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.794369][T10946] device syzkaller0 entered promiscuous mode [ 561.825020][ T1107] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 562.029785][ T1107] usb 2-1: USB disconnect, device number 18 [ 562.051603][ T4439] usb 4-1: Using ep0 maxpacket: 32 [ 562.101316][ T5061] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.112544][ T5061] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 562.177218][ T5061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.343113][ T5061] usb 5-1: config 0 descriptor?? [ 562.453779][ T5061] pwc: Askey VC010 type 2 USB webcam detected. [ 562.788176][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.830347][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.891357][ T4439] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 562.907384][ T4439] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.909013][T10959] xt_recent: Unsupported userspace flags (000000de) [ 562.924800][ T5061] pwc: recv_control_msg error -32 req 02 val 2b00 [ 562.931509][ T4439] usb 4-1: config 0 has no interface number 0 [ 562.939273][ T4439] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.981312][ T5061] pwc: recv_control_msg error -32 req 02 val 2700 [ 563.031337][ T5061] pwc: recv_control_msg error -32 req 02 val 2c00 [ 563.071294][ T5061] pwc: recv_control_msg error -32 req 04 val 1000 [ 563.111370][ T5061] pwc: recv_control_msg error -32 req 04 val 1300 [ 563.121353][ T4439] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 563.136672][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.151336][ T5061] pwc: recv_control_msg error -32 req 04 val 1400 [ 563.158016][ T4439] usb 4-1: Product: syz [ 563.172387][ T4439] usb 4-1: Manufacturer: syz [ 563.186257][ T4439] usb 4-1: SerialNumber: syz [ 563.191362][ T5061] pwc: recv_control_msg error -32 req 02 val 2000 [ 563.209677][ T4439] usb 4-1: config 0 descriptor?? [ 563.231314][ T5061] pwc: recv_control_msg error -32 req 02 val 2100 [ 563.262616][ T4439] smsc95xx v2.0.0 [ 563.266269][ T4439] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 563.271309][ T5061] pwc: recv_control_msg error -32 req 04 val 1500 [ 563.284971][ T4439] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 563.291902][ T1107] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 563.321325][ T5061] pwc: recv_control_msg error -32 req 02 val 2500 [ 563.371379][ T5061] pwc: recv_control_msg error -32 req 02 val 2400 [ 563.411488][ T5061] pwc: recv_control_msg error -32 req 02 val 2600 [ 563.451356][ T5061] pwc: recv_control_msg error -32 req 02 val 2900 [ 563.491392][ T5061] pwc: recv_control_msg error -32 req 02 val 2800 [ 563.571223][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 563.701371][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.722199][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 563.743136][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 563.762006][ T5061] pwc: Registered as video103. [ 563.779877][T10964] overlayfs: failed to resolve './file1': -2 [ 563.785389][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 563.786141][ T5061] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 563.802068][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.981413][ T1107] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 564.004356][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.053544][ T1107] usb 2-1: Product: syz [ 564.073501][ T1107] usb 2-1: Manufacturer: syz [ 564.086300][ T1107] usb 2-1: SerialNumber: syz [ 564.110320][ T1107] usb 2-1: config 0 descriptor?? [ 564.138139][ T5061] usb 5-1: USB disconnect, device number 19 [ 564.151441][T10957] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 564.172316][ T1107] ati_remote_probe: Unexpected desc.bNumEndpoints [ 564.752371][ T5061] usb 2-1: USB disconnect, device number 19 [ 564.996353][ T1107] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 565.243416][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 565.268000][T10982] autofs4:pid:10982:autofs_fill_super: called with bogus options [ 565.361610][ T1107] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.410100][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 565.437433][ T1107] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 565.464475][T10985] device syzkaller0 entered promiscuous mode [ 565.479891][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.517493][ T1107] usb 1-1: config 0 descriptor?? [ 566.016914][ T1107] hid-generic 0003:1E71:2009.002D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 566.527151][ T5197] usb 1-1: USB disconnect, device number 23 [ 567.321323][ T1107] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 567.971486][ T1107] usb 3-1: No LPM exit latency info found, disabling LPM. [ 568.099248][ T1107] usb 3-1: config 172 has an invalid interface number: 190 but max is 1 [ 568.356690][ T1107] usb 3-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 568.863695][ T1107] usb 3-1: config 172 has no interface number 1 [ 568.899113][ T1107] usb 3-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 568.974195][ T1107] usb 3-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 569.002986][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.011999][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.021047][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.029939][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.038801][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.047672][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.056544][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.065425][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.074311][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.083170][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.238072][T11022] device syzkaller0 entered promiscuous mode [ 569.394705][ T1107] usb 3-1: string descriptor 0 read error: -22 [ 570.065749][ T4231] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 570.119496][ T1107] usb 3-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 570.141040][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.191433][ T1107] usb 3-1: can't set config #172, error -71 [ 570.206724][ T1107] usb 3-1: USB disconnect, device number 30 [ 570.371536][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 570.491337][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.516922][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 570.547746][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 570.566089][T11038] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 570.571665][T11038] PKCS7: Only support pkcs7_signedData type [ 571.240774][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 571.271326][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.455631][ T4231] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 571.480200][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.509902][ T4231] usb 1-1: Product: syz [ 571.511314][ T21] usb 4-1: USB disconnect, device number 17 [ 571.528569][ T4231] usb 1-1: Manufacturer: syz [ 571.542672][ T4231] usb 1-1: SerialNumber: syz [ 571.599461][ T4231] usb 1-1: config 0 descriptor?? [ 571.631495][T11020] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 571.658141][ T4231] ati_remote_probe: Unexpected desc.bNumEndpoints [ 572.003409][ T5070] usb 1-1: USB disconnect, device number 24 [ 572.343202][T11065] device syzkaller0 entered promiscuous mode [ 572.441400][ T4439] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 572.531208][ T1107] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 572.750103][ T4439] usb 4-1: Using ep0 maxpacket: 32 [ 572.881919][ T4439] usb 4-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 572.881959][ T4439] usb 4-1: config 45 has 0 interfaces, different from the descriptor's value: 1 [ 572.922121][ T1107] usb 2-1: No LPM exit latency info found, disabling LPM. [ 573.021800][ T1107] usb 2-1: config 172 has an invalid interface number: 190 but max is 1 [ 573.030662][ T1107] usb 2-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 573.043637][ T4439] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 573.064431][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.084758][ T1107] usb 2-1: config 172 has no interface number 1 [ 573.094413][ T4439] usb 4-1: Product: syz [ 573.119009][ T4439] usb 4-1: Manufacturer: syz [ 573.129140][ T1107] usb 2-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 573.143574][ T4439] usb 4-1: SerialNumber: syz [ 573.178681][ T1107] usb 2-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 573.431521][ T1107] usb 2-1: string descriptor 0 read error: -22 [ 573.450311][ T1107] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 573.463526][ T4439] usb 4-1: USB disconnect, device number 18 [ 573.487447][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.574823][ T1107] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 573.775859][ T4439] usb 2-1: USB disconnect, device number 20 [ 573.981338][ T1107] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 574.232413][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 574.354022][ T1107] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.377512][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.404188][ T1107] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 574.488379][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.525487][ T1107] usb 5-1: config 0 descriptor?? [ 574.593931][T11099] device syzkaller0 entered promiscuous mode [ 574.845454][ T4439] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 575.208043][ T1107] hid-generic 0003:1E71:2009.002E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 575.321302][ T4439] usb 2-1: Using ep0 maxpacket: 8 [ 575.441458][ T4439] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.464404][ T4439] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 575.499390][ T4439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 575.545450][ T4439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 575.575835][ T4439] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.611705][ T1107] usb 5-1: USB disconnect, device number 20 [ 575.771821][ T4439] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 576.183313][ T4439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.227955][ T4439] usb 2-1: Product: syz [ 576.235860][ T4439] usb 2-1: Manufacturer: syz [ 576.240493][ T4439] usb 2-1: SerialNumber: syz [ 576.274866][ T4439] usb 2-1: config 0 descriptor?? [ 576.302530][T11097] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 576.322919][ T4439] ati_remote_probe: Unexpected desc.bNumEndpoints [ 576.909140][ T21] usb 2-1: USB disconnect, device number 21 [ 579.267480][T11142] device syzkaller0 entered promiscuous mode [ 580.011093][T11153] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.289253][T11153] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 581.655675][T11171] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 581.655692][T11171] PKCS7: Only support pkcs7_signedData type [ 583.189255][T11183] device syzkaller0 entered promiscuous mode [ 584.706206][T11201] autofs4:pid:11201:autofs_fill_super: called with bogus options [ 585.560847][T11210] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 585.566444][T11210] PKCS7: Only support pkcs7_signedData type [ 589.307475][T11239] autofs4:pid:11239:autofs_fill_super: called with bogus options [ 590.434101][T11252] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 590.439723][T11252] PKCS7: Only support pkcs7_signedData type [ 592.191299][ T4197] Bluetooth: hci4: link tx timeout [ 592.196661][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 592.205309][ T4197] Bluetooth: hci4: link tx timeout [ 592.210884][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 592.766891][T11274] trusted_key: encrypted_key: key user:syz not found [ 595.451611][T11290] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.467437][T11290] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 595.545967][T11292] device syzkaller0 entered promiscuous mode [ 598.601468][ T5070] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 598.683836][T11320] __nla_validate_parse: 43 callbacks suppressed [ 598.684194][T11320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2060'. [ 598.901372][ T5070] usb 3-1: Using ep0 maxpacket: 8 [ 599.031350][ T5070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.069617][ T5070] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 599.082594][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2060'. [ 599.105716][ T5070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 599.126934][ T5070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 599.227178][ T5070] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.791450][ T5070] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 599.805365][ T5070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.816910][ T5070] usb 3-1: Product: syz [ 599.821428][ T5070] usb 3-1: Manufacturer: syz [ 599.826170][ T5070] usb 3-1: SerialNumber: syz [ 599.842813][ T5070] usb 3-1: config 0 descriptor?? [ 599.858739][T11334] autofs4:pid:11334:autofs_fill_super: called with bogus options [ 599.869145][T11315] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 599.913013][ T5070] ati_remote_probe: Unexpected desc.bNumEndpoints [ 600.214920][T11350] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 600.214920][T11350] program syz.0.2066 not setting count and/or reply_len properly [ 600.247634][T11349] device syzkaller0 entered promiscuous mode [ 600.484287][ T5070] usb 3-1: USB disconnect, device number 31 [ 602.283087][T11378] autofs4:pid:11378:autofs_fill_super: called with bogus options [ 602.778115][ T4231] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 602.944812][ T4231] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 603.775162][T11394] device syzkaller0 entered promiscuous mode [ 604.398188][T11395] fido_id[11395]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 605.739495][T11412] sp0: Synchronizing with TNC [ 606.871583][T11411] [U] è [ 606.922591][ T5197] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 607.061351][ T5197] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 607.860664][T11432] fido_id[11432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 608.942924][T11439] device syzkaller0 entered promiscuous mode [ 610.397634][T11448] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 610.397634][T11448] program syz.0.2094 not setting count and/or reply_len properly [ 610.736039][T11467] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 610.741709][T11467] PKCS7: Only support pkcs7_signedData type [ 612.109312][T11469] device syzkaller0 entered promiscuous mode [ 615.256792][T11504] device syzkaller0 entered promiscuous mode [ 616.301897][T11513] device syzkaller0 entered promiscuous mode [ 616.661405][ T5061] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 616.921319][ T5061] usb 3-1: Using ep0 maxpacket: 32 [ 617.061364][ T5061] usb 3-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 617.072176][ T5061] usb 3-1: config 45 has 0 interfaces, different from the descriptor's value: 1 [ 617.251328][ T5061] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 617.423596][ T5061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.432152][ T5061] usb 3-1: Product: syz [ 617.436474][ T5061] usb 3-1: Manufacturer: syz [ 617.441121][ T5061] usb 3-1: SerialNumber: syz [ 618.566955][ T5061] usb 3-1: USB disconnect, device number 32 [ 619.691785][T11552] device syzkaller0 entered promiscuous mode [ 621.833045][T11592] xt_recent: Unsupported userspace flags (000000de) [ 622.610587][T11599] netlink: 'syz.3.2141': attribute type 3 has an invalid length. [ 622.631807][T11597] device syzkaller0 entered promiscuous mode [ 622.838413][T11602] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 622.838413][T11602] program syz.3.2143 not setting count and/or reply_len properly [ 623.141298][ T5061] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 623.961452][ T5061] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.998095][ T5061] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 624.070004][ T5061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.113341][ T5061] usb 5-1: config 0 descriptor?? [ 624.135162][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.142060][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.174368][ T5061] pwc: Askey VC010 type 2 USB webcam detected. [ 624.621393][ T5061] pwc: recv_control_msg error -32 req 02 val 2b00 [ 624.691289][ T5061] pwc: recv_control_msg error -32 req 02 val 2700 [ 624.731290][ T5061] pwc: recv_control_msg error -32 req 02 val 2c00 [ 624.791297][ T5061] pwc: recv_control_msg error -32 req 04 val 1000 [ 624.831329][ T5061] pwc: recv_control_msg error -32 req 04 val 1300 [ 624.891409][ T5061] pwc: recv_control_msg error -32 req 04 val 1400 [ 624.961308][ T5061] pwc: recv_control_msg error -32 req 02 val 2000 [ 625.001302][ T5061] pwc: recv_control_msg error -32 req 02 val 2100 [ 625.061313][ T5061] pwc: recv_control_msg error -32 req 04 val 1500 [ 625.141414][ T5061] pwc: recv_control_msg error -32 req 02 val 2500 [ 625.221529][ T5061] pwc: recv_control_msg error -32 req 02 val 2400 [ 625.286754][ T5061] pwc: recv_control_msg error -32 req 02 val 2600 [ 625.327566][T11628] xt_recent: Unsupported userspace flags (000000de) [ 625.342193][ T5061] pwc: recv_control_msg error -32 req 02 val 2900 [ 625.393694][ T5061] pwc: recv_control_msg error -32 req 02 val 2800 [ 625.701461][ T5061] pwc: recv_control_msg error -71 req 04 val 1200 [ 625.789822][ T5061] pwc: Registered as video103. [ 625.829382][ T5061] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 625.901493][ T5061] usb 5-1: USB disconnect, device number 21 [ 626.679080][T11639] device syzkaller0 entered promiscuous mode [ 629.472742][T11668] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 629.472742][T11668] program syz.4.2162 not setting count and/or reply_len properly [ 629.549672][T11672] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.567890][T11672] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 632.082180][T11687] device syzkaller0 entered promiscuous mode [ 633.093012][T11700] device syzkaller0 entered promiscuous mode [ 635.636051][T11735] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 635.636051][T11735] program syz.4.2183 not setting count and/or reply_len properly [ 638.039459][T11748] device syzkaller0 entered promiscuous mode [ 638.614522][T11755] ieee802154 phy0 wpan0: encryption failed: -22 [ 638.623473][T11755] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 641.865646][T11791] ieee802154 phy0 wpan0: encryption failed: -22 [ 641.874498][T11791] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 642.403397][T11801] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 642.408975][T11801] PKCS7: Only support pkcs7_signedData type [ 642.572054][T11792] device syzkaller0 entered promiscuous mode [ 646.059293][T11833] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.068210][T11833] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 646.880980][T11847] device syzkaller0 entered promiscuous mode [ 651.078843][ T5056] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 651.290657][ T5056] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 651.419641][T11872] fido_id[11872]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 651.781256][ T4439] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 653.177757][T11887] device syzkaller0 entered promiscuous mode [ 653.271298][ T4439] usb 4-1: Using ep0 maxpacket: 16 [ 653.311175][T11889] device syzkaller0 entered promiscuous mode [ 653.411458][ T4439] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.455232][ T4439] usb 4-1: config 0 interface 0 has no altsetting 0 [ 653.479564][ T4439] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 653.549328][ T4439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.589368][ T4439] usb 4-1: config 0 descriptor?? [ 653.953760][ T26] audit: type=1800 audit(1774389042.217:2): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2226" name="bus" dev="ramfs" ino=61544 res=0 errno=0 [ 654.074882][ T4439] hid-generic 0003:1E71:2009.0032: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 657.301281][ T4197] Bluetooth: hci4: link tx timeout [ 657.306461][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 657.314241][ T4197] Bluetooth: hci4: link tx timeout [ 657.319345][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 657.377860][ T1110] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 657.551829][ T1110] hid-generic 0000:0000:0000.0033: hidraw1: HID v0.00 Device [syz1] on syz0 [ 658.537577][T11924] fido_id[11924]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 658.552955][T11936] device syzkaller0 entered promiscuous mode [ 660.241253][ T4439] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 661.911313][ T4439] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 661.956023][ T4439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.033271][ T4439] usb 3-1: config 0 descriptor?? [ 662.042336][ T1110] usb 4-1: USB disconnect, device number 19 [ 662.112407][ T4439] cp210x 3-1:0.0: cp210x converter detected [ 662.573259][ T4439] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 663.033406][ T4439] usb 3-1: cp210x converter now attached to ttyUSB0 [ 663.404328][ T5070] usb 3-1: USB disconnect, device number 33 [ 663.902731][ T5070] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 663.943221][ T5070] cp210x 3-1:0.0: device disconnected [ 664.280821][T11994] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.290491][T11994] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 664.416877][T11991] autofs4:pid:11991:autofs_fill_super: called with bogus options [ 666.952087][T12030] autofs4:pid:12030:autofs_fill_super: called with bogus options [ 667.364866][T12033] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 667.387219][T12033] device bond1 entered promiscuous mode [ 667.393844][T12033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.475366][T12036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.488147][T12036] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 667.500310][T12036] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 667.513657][T12036] bond1: (slave wireguard0): making interface the new active one [ 667.521632][T12036] device wireguard0 entered promiscuous mode [ 667.534172][T12036] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 667.582031][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 669.540061][ T4197] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 669.611354][ T5070] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 670.071410][ T5070] usb 1-1: No LPM exit latency info found, disabling LPM. [ 670.221808][ T5070] usb 1-1: config 172 has an invalid interface number: 190 but max is 1 [ 670.289017][ T5070] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 670.373611][ T5070] usb 1-1: config 172 has no interface number 1 [ 670.400584][ T5070] usb 1-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 670.421322][ T5070] usb 1-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 670.671622][ T5070] usb 1-1: string descriptor 0 read error: -22 [ 670.684204][ T5070] usb 1-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 670.694288][ T5070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.764032][ T5070] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 670.968859][ T5070] usb 1-1: USB disconnect, device number 25 [ 673.241114][ T9273] libceph: connect (1)[c::]:6789 error -101 [ 673.259027][ T9273] libceph: mon0 (1)[c::]:6789 connect error [ 673.590252][ T9273] libceph: connect (1)[c::]:6789 error -101 [ 673.604524][ T9273] libceph: mon0 (1)[c::]:6789 connect error [ 673.861502][ T1110] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 674.149834][ T5197] libceph: connect (1)[c::]:6789 error -101 [ 674.161365][ T5197] libceph: mon0 (1)[c::]:6789 connect error [ 674.252987][T12098] ceph: No mds server is up or the cluster is laggy [ 675.194989][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.216842][ T1110] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 675.226194][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.245638][ T1110] usb 3-1: config 0 descriptor?? [ 675.283271][ T1110] pwc: Askey VC010 type 2 USB webcam detected. [ 675.711331][ T1110] pwc: recv_control_msg error -32 req 02 val 2b00 [ 676.179139][T12134] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 676.184761][T12134] PKCS7: Only support pkcs7_signedData type [ 676.574229][T12139] xt_recent: Unsupported userspace flags (000000de) [ 676.685844][ T1110] pwc: recv_control_msg error -32 req 02 val 2700 [ 678.611315][ T1110] pwc: recv_control_msg error -71 req 02 val 2c00 [ 678.644312][ T1110] pwc: recv_control_msg error -71 req 04 val 1000 [ 678.692980][ T1110] pwc: recv_control_msg error -71 req 04 val 1300 [ 678.911277][ T1110] pwc: recv_control_msg error -71 req 04 val 1400 [ 678.958797][ T1110] pwc: recv_control_msg error -71 req 02 val 2000 [ 679.041543][ T1110] pwc: recv_control_msg error -71 req 02 val 2100 [ 679.050558][T12166] device syzkaller0 entered promiscuous mode [ 679.101392][ T1110] pwc: recv_control_msg error -71 req 04 val 1500 [ 679.166914][ T1110] pwc: recv_control_msg error -71 req 02 val 2500 [ 679.824838][ T1110] pwc: recv_control_msg error -71 req 02 val 2400 [ 679.851313][ T1110] pwc: recv_control_msg error -71 req 02 val 2600 [ 680.456604][ T1110] pwc: recv_control_msg error -71 req 02 val 2900 [ 680.494428][ T1110] pwc: recv_control_msg error -71 req 02 val 2800 [ 680.521584][ T1110] pwc: recv_control_msg error -71 req 04 val 1100 [ 680.542086][ T1110] pwc: recv_control_msg error -71 req 04 val 1200 [ 680.557710][ T1110] pwc: Registered as video103. [ 680.587544][ T1110] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 680.684679][ T1110] usb 3-1: USB disconnect, device number 34 [ 681.558713][T12210] device syzkaller0 entered promiscuous mode [ 681.638454][T12213] autofs4:pid:12213:autofs_fill_super: called with bogus options [ 683.271444][ T1110] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 683.551616][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 683.681778][ T1110] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.741534][ T1110] usb 1-1: config 0 interface 0 has no altsetting 0 [ 683.761507][ T1110] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 683.761603][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.825416][ T1110] usb 1-1: config 0 descriptor?? [ 684.590174][ T1110] hid-generic 0003:1E71:2009.0034: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 685.319076][T12250] device syzkaller0 entered promiscuous mode [ 685.362467][ T5070] usb 1-1: USB disconnect, device number 26 [ 685.587005][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.593600][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.981260][ T5071] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 686.981350][ T1110] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 687.148234][T12286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'. [ 687.250713][ T1110] usb 2-1: device descriptor read/64, error -71 [ 687.301407][ T5071] usb 1-1: Using ep0 maxpacket: 8 [ 688.222923][ T5071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.233714][ T5071] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 688.244752][ T5071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 688.256086][ T5071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 688.268283][ T5071] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.291330][ T1110] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 688.446082][T12294] device syzkaller0 entered promiscuous mode [ 689.271801][ T5071] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 689.281302][ T5071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.290031][ T5071] usb 1-1: Product: syz [ 689.296104][ T5071] usb 1-1: Manufacturer: syz [ 689.300919][ T5071] usb 1-1: SerialNumber: syz [ 689.305962][ T1110] usb 2-1: device descriptor read/64, error -71 [ 689.347515][ T5071] usb 1-1: config 0 descriptor?? [ 689.397865][T12277] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 689.503586][ T1110] usb usb2-port1: attempt power cycle [ 689.545684][ T5071] ati_remote_probe: Unexpected desc.bNumEndpoints [ 689.946273][ T5071] usb 1-1: USB disconnect, device number 27 [ 690.331348][ T1110] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 690.561331][ T4233] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 690.577599][ T1110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.598201][ T1110] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 690.619357][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.639024][ T1110] usb 2-1: config 0 descriptor?? [ 690.725316][ T1110] pwc: Askey VC010 type 2 USB webcam detected. [ 690.831212][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 690.951488][ T4233] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.962761][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.969639][ T4233] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 690.981442][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.131480][ T1110] pwc: recv_control_msg error -32 req 02 val 2b00 [ 691.181462][ T1110] pwc: recv_control_msg error -32 req 02 val 2700 [ 691.221482][ T1110] pwc: recv_control_msg error -32 req 02 val 2c00 [ 691.250998][ T4233] usb 5-1: config 0 descriptor?? [ 691.262957][ T1110] pwc: recv_control_msg error -32 req 04 val 1000 [ 691.441439][ T1110] pwc: recv_control_msg error -32 req 04 val 1300 [ 691.491327][ T1110] pwc: recv_control_msg error -32 req 04 val 1400 [ 691.551308][ T1110] pwc: recv_control_msg error -32 req 02 val 2000 [ 691.621373][ T1110] pwc: recv_control_msg error -32 req 02 val 2100 [ 691.765443][ T4233] hid-generic 0003:1E71:2009.0035: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 691.811494][ T1110] pwc: recv_control_msg error -32 req 04 val 1500 [ 691.971258][ T4231] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 692.211496][ T4231] usb 4-1: device descriptor read/64, error -71 [ 692.544369][ T1110] pwc: recv_control_msg error -32 req 02 val 2500 [ 692.581493][ T1110] pwc: recv_control_msg error -32 req 02 val 2400 [ 692.621590][ T1110] pwc: recv_control_msg error -32 req 02 val 2600 [ 692.691599][ T1110] pwc: recv_control_msg error -32 req 02 val 2900 [ 692.854244][ T4231] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 693.181356][ T1110] pwc: recv_control_msg error -71 req 04 val 1200 [ 693.184774][ T4230] usb 5-1: USB disconnect, device number 22 [ 693.188945][ T1110] pwc: Registered as video103. [ 693.200318][ T1110] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 693.220669][ T1110] usb 2-1: USB disconnect, device number 24 [ 693.281985][ T4231] usb 4-1: device descriptor read/64, error -71 [ 693.734024][T12350] autofs4:pid:12350:autofs_fill_super: called with bogus options [ 693.801329][ T4439] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 693.893375][ T4231] usb usb4-port1: attempt power cycle [ 694.006629][T12356] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 694.012273][T12356] PKCS7: Only support pkcs7_signedData type [ 694.711232][ T4439] usb 3-1: Using ep0 maxpacket: 8 [ 695.679509][ T4439] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.699678][ T4439] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 695.727333][ T4439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 695.937525][ T4439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 696.101359][ T4439] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.151269][ T4439] usb 3-1: string descriptor 0 read error: -71 [ 696.168179][ T4439] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 696.698236][T12385] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.708105][T12385] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 696.786058][ T4439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.890531][ T4439] usb 3-1: config 0 descriptor?? [ 697.027916][ T4439] usb 3-1: can't set config #0, error -71 [ 697.213798][ T4439] usb 3-1: USB disconnect, device number 35 [ 697.378190][T12396] device syzkaller0 entered promiscuous mode [ 697.592030][T12398] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 697.597581][T12398] PKCS7: Only support pkcs7_signedData type [ 698.161343][ T4231] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 698.251231][ T4439] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 698.351366][ T4231] usb 2-1: device descriptor read/64, error -71 [ 698.491214][ T4439] usb 5-1: Using ep0 maxpacket: 16 [ 698.611386][ T4439] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.702557][ T4231] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 698.731827][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 698.738968][ T4439] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 698.754743][ T4439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.766796][ T4439] usb 5-1: config 0 descriptor?? [ 698.791328][ T1110] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 698.911237][ T4231] usb 2-1: device descriptor read/64, error -71 [ 699.031934][ T4231] usb usb2-port1: attempt power cycle [ 699.051299][ T1110] usb 3-1: Using ep0 maxpacket: 8 [ 699.191532][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.217953][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 699.254831][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 699.288929][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 699.328859][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.621836][ T1110] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 699.645113][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.686935][ T1110] usb 3-1: Product: syz [ 699.706617][ T4439] hid-generic 0003:1E71:2009.0036: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 699.713321][ T1110] usb 3-1: Manufacturer: syz [ 699.827734][ T1110] usb 3-1: SerialNumber: syz [ 699.856892][ T1110] usb 3-1: config 0 descriptor?? [ 699.991230][ T4231] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 700.013552][T12410] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 700.056937][ T1110] ati_remote_probe: Unexpected desc.bNumEndpoints [ 700.121492][ T4231] usb 2-1: device descriptor read/8, error -71 [ 700.266425][ T5071] usb 3-1: USB disconnect, device number 36 [ 700.441343][ T4231] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 701.668958][T12441] autofs4:pid:12441:autofs_fill_super: called with bogus options [ 701.851325][ T4231] usb 2-1: device descriptor read/8, error -71 [ 701.951604][T12448] overlayfs: failed to resolve './file0': -2 [ 702.228713][ T4231] usb usb2-port1: unable to enumerate USB device [ 702.331443][ T1110] usb 5-1: USB disconnect, device number 23 [ 705.901320][ T1110] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 706.026783][ T5071] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 706.560882][T12499] overlayfs: failed to resolve './file0': -2 [ 706.569119][ T1110] usb 1-1: Using ep0 maxpacket: 8 [ 706.675302][T12501] NILFS (loop4): device size too small [ 707.971264][ T5071] usb 4-1: Using ep0 maxpacket: 16 [ 708.068313][ T4231] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 708.117123][ T1110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.131302][ T1110] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 708.167690][ T5071] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.181826][T12507] zonefs (nullb0) ERROR: Not a zoned block device [ 708.195062][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 708.211270][ T5071] usb 4-1: config 0 interface 0 has no altsetting 0 [ 708.463842][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 708.478731][ T5071] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 708.489468][ T1110] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.508698][ T5071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.524927][ T5071] usb 4-1: config 0 descriptor?? [ 708.692129][ T4231] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.712879][ T4231] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.823101][ T4231] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.832222][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.965585][T12517] overlayfs: failed to resolve './file1': -2 [ 709.151325][ T5071] usbhid 4-1:0.0: can't add hid device: -71 [ 709.157420][ T5071] usbhid: probe of 4-1:0.0 failed with error -71 [ 709.189718][ T5071] usb 4-1: USB disconnect, device number 23 [ 709.195969][ T1110] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 709.212146][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.269387][ T1110] usb 1-1: config 0 descriptor?? [ 709.302582][ T1110] usb 1-1: can't set config #0, error -71 [ 709.323405][ T1110] usb 1-1: USB disconnect, device number 28 [ 709.364460][ T4231] usb 3-1: usb_control_msg returned -32 [ 709.370057][ T4231] usbtmc 3-1:16.0: can't read capabilities [ 711.221697][ T4231] usb 3-1: USB disconnect, device number 37 [ 711.371120][T12543] xt_recent: Unsupported userspace flags (000000de) [ 711.432977][T12545] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 711.432977][T12545] program syz.2.2414 not setting count and/or reply_len properly [ 711.741709][ T9273] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 712.827383][ T9273] usb 1-1: device descriptor read/64, error -71 [ 712.902642][ T4439] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 713.131395][ T9273] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 713.181458][ T4439] usb 4-1: Using ep0 maxpacket: 16 [ 713.311374][ T4439] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.327942][ T4439] usb 4-1: config 0 interface 0 has no altsetting 0 [ 713.335053][ T9273] usb 1-1: device descriptor read/64, error -71 [ 713.347042][ T4439] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 713.356734][ T4439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.379108][ T4439] usb 4-1: config 0 descriptor?? [ 713.471370][ T9273] usb usb1-port1: attempt power cycle [ 713.804424][ T21] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 713.933857][ T9273] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 713.947404][ T4439] hid-generic 0003:1E71:2009.0037: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 714.055265][T12565] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 714.060806][T12565] PKCS7: Only support pkcs7_signedData type [ 714.111700][ T9273] usb 1-1: device descriptor read/8, error -71 [ 714.381391][ T9273] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 714.921354][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 715.411297][ T9273] usb 1-1: device descriptor read/8, error -71 [ 715.424754][ T1110] usb 4-1: USB disconnect, device number 24 [ 715.451305][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 715.463668][ T21] usb 5-1: can't read configurations, error -71 [ 715.520715][T12564] fido_id[12564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 715.592060][ T9273] usb usb1-port1: unable to enumerate USB device [ 715.731677][T12576] comedi comedi0: Minor 3 could not be opened [ 716.433197][T12587] overlayfs: failed to resolve './file0': -2 [ 718.080507][T12583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.299613][T12604] zonefs (nullb0) ERROR: Not a zoned block device [ 719.501387][ T5071] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 719.894626][ T5071] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.943190][ T5071] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.101876][ T5071] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 720.160160][ T5071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 720.345143][ T5071] usb 4-1: SerialNumber: syz [ 720.806839][T12628] autofs4:pid:12628:autofs_fill_super: called with bogus options [ 720.837050][ T4197] Bluetooth: hci4: link tx timeout [ 720.843125][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 720.851655][ T4197] Bluetooth: hci4: link tx timeout [ 720.857198][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 721.323249][T12609] infiniband syz2: set down [ 721.328092][T12609] infiniband syz2: added ipvlan0 [ 721.557738][T12609] RDS/IB: syz2: added [ 721.562458][T12609] smc: adding ib device syz2 with port count 1 [ 721.568704][T12609] smc: ib device syz2 port 1 has pnetid [ 721.855011][T12631] Cannot find del_set index 2 as target [ 721.908215][ T5071] usb 4-1: 0:2 : does not exist [ 722.071700][ T5071] usb 4-1: USB disconnect, device number 25 [ 722.351335][ T4231] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 722.495235][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.560844][T12635] device syzkaller0 entered promiscuous mode [ 722.631432][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 722.687741][T12640] zonefs (nullb0) ERROR: Not a zoned block device [ 722.754639][ T4231] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.786058][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 722.806245][ T4231] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 722.841492][ T4439] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 722.882535][T12648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.890251][T12648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.903735][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.025245][ T4231] usb 3-1: config 0 descriptor?? [ 723.101385][ T4439] usb 5-1: Using ep0 maxpacket: 32 [ 723.230609][T12648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.238611][T12648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.261474][ T4439] usb 5-1: unable to get BOS descriptor or descriptor too short [ 723.381599][ T4439] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.432412][ T4439] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 723.613695][ T4231] hid-generic 0003:1E71:2009.0038: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 723.691863][ T4439] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 723.728566][ T4439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.306110][ T4439] usb 5-1: Product: syz [ 724.756803][ T4439] usb 5-1: Manufacturer: syz [ 725.000590][ T4439] usb 5-1: SerialNumber: syz [ 725.460786][ T4439] usb 5-1: can't set config #1, error -71 [ 725.614169][ T4439] usb 5-1: USB disconnect, device number 26 [ 725.746043][ T4230] usb 3-1: USB disconnect, device number 38 [ 725.933036][T12657] fido_id[12657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 726.860340][ T4439] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 726.868121][ T4230] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 727.246319][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 727.246366][ T4439] usb 4-1: Using ep0 maxpacket: 8 [ 727.371494][ T4439] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.488222][ T4439] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 727.572800][ T4439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 727.585487][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.630639][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.692403][ T4439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 727.724342][ T4230] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 727.762055][ T4439] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.809847][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.884084][ T4230] usb 1-1: config 0 descriptor?? [ 728.048553][ T4230] hub 1-1:0.0: USB hub found [ 728.060747][T12684] autofs4:pid:12684:autofs_fill_super: called with bogus options [ 728.075060][ T4439] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 728.101810][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.112158][ T4439] usb 4-1: Product: syz [ 728.117279][ T4439] usb 4-1: Manufacturer: syz [ 728.125234][ T4439] usb 4-1: SerialNumber: syz [ 728.172281][ T5197] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 728.181369][ T4230] hub 1-1:0.0: 1 port detected [ 728.197589][ T4439] usb 4-1: config 0 descriptor?? [ 728.235937][T12676] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 728.436407][ T4439] ati_remote_probe: Unexpected desc.bNumEndpoints [ 728.503262][ T5197] usb 2-1: Using ep0 maxpacket: 32 [ 728.548077][ T4439] usb 4-1: USB disconnect, device number 26 [ 728.875252][ T5197] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 729.042584][ T5197] usb 2-1: config 0 has no interface number 0 [ 729.081609][ T4230] hub 1-1:0.0: activate --> -90 [ 729.365212][T12712] ieee802154 phy0 wpan0: encryption failed: -22 [ 729.380549][T12712] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 729.730016][ T4233] usb 1-1: USB disconnect, device number 33 [ 729.923399][ T5197] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 729.933563][ T5197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.941630][ T5197] usb 2-1: Product: syz [ 729.986177][ T4230] usb 1-1-port1: attempt power cycle [ 729.991719][ T5197] usb 2-1: Manufacturer: syz [ 729.996724][ T5197] usb 2-1: SerialNumber: syz [ 730.003119][ T5197] usb 2-1: config 0 descriptor?? [ 730.042424][ T5197] smsc95xx v2.0.0 [ 730.151378][T12715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2463'. [ 730.241286][ T4439] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 730.821351][ T5197] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 730.851481][ T5197] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 730.921322][ T4439] usb 4-1: Using ep0 maxpacket: 16 [ 731.241849][ T4439] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.644329][ T4439] usb 4-1: config 0 interface 0 has no altsetting 0 [ 731.652744][ T4439] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 731.665971][ T4439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.682893][ T4439] usb 4-1: config 0 descriptor?? [ 731.932050][ T5197] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 731.958682][ T5197] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 732.009020][ T5197] usb 2-1: USB disconnect, device number 29 [ 732.206198][ T4439] hid-generic 0003:1E71:2009.0039: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 733.341825][ T4233] usb 4-1: USB disconnect, device number 27 [ 733.431300][ T5197] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 733.791461][ T5197] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 733.811297][ T5197] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.831307][ T5197] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 733.847044][ T5197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.151387][ T5197] usb 3-1: usb_control_msg returned -32 [ 734.157027][ T5197] usbtmc 3-1:16.0: can't read capabilities [ 734.322605][T12756] overlayfs: failed to resolve './file1': -2 [ 736.848653][ T5071] usb 3-1: USB disconnect, device number 39 [ 737.238535][T12781] autofs4:pid:12781:autofs_fill_super: called with bogus options [ 738.651414][ T4439] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 738.951361][ T4439] usb 4-1: Using ep0 maxpacket: 8 [ 739.391406][ T4439] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 739.400487][ T4439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.463614][ T4439] pvrusb2: Hardware description: Terratec Grabster AV400 [ 739.470672][ T4439] pvrusb2: ********** [ 739.611946][ T4439] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 739.697465][ T4439] pvrusb2: Important functionality might not be entirely working. [ 739.810493][ T4439] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 739.893250][ T4439] pvrusb2: ********** [ 739.948426][ T2421] pvrusb2: Invalid write control endpoint [ 741.200758][ T4439] usb 4-1: USB disconnect, device number 28 [ 741.309370][ T2421] pvrusb2: Invalid write control endpoint [ 741.330930][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 741.371356][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 741.393244][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 741.486085][ T2421] pvrusb2: Device being rendered inoperable [ 742.052980][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 742.086526][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 742.175527][ T2421] pvrusb2: Attached sub-driver cx25840 [ 742.277314][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 742.326351][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 743.924349][T12853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2500'. [ 745.997378][T12867] autofs4:pid:12867:autofs_fill_super: called with bogus options [ 747.129116][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.551598][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.659266][T12898] overlayfs: failed to resolve './file1': -2 [ 748.411364][ T5056] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 749.983342][T12913] autofs4:pid:12913:autofs_fill_super: called with bogus options [ 750.021526][ T5056] usb 4-1: No LPM exit latency info found, disabling LPM. [ 750.171525][ T5056] usb 4-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 750.188876][ T5056] usb 4-1: config 172 has 0 interfaces, different from the descriptor's value: 2 [ 750.451454][ T5056] usb 4-1: string descriptor 0 read error: -22 [ 750.884032][ T5056] usb 4-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 750.941344][ T5056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.083686][ T5056] usb 4-1: can't set config #172, error -71 [ 751.260286][ T5056] usb 4-1: USB disconnect, device number 29 [ 751.349179][T12922] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 751.354855][T12922] PKCS7: Only support pkcs7_signedData type [ 752.731220][T12840] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 753.835376][T12840] usb 4-1: device descriptor read/64, error -71 [ 754.331317][T12840] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 754.551376][T12840] usb 4-1: device descriptor read/64, error -71 [ 754.681403][T12840] usb usb4-port1: attempt power cycle [ 754.901241][ T4439] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 755.091260][T12840] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 755.271377][ T4439] usb 3-1: No LPM exit latency info found, disabling LPM. [ 755.402109][ T4439] usb 3-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 755.438954][ T4439] usb 3-1: config 172 has 1 interface, different from the descriptor's value: 2 [ 755.471494][T12840] usb 4-1: device descriptor read/8, error -71 [ 755.506689][ T4439] usb 3-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 755.610792][ T4439] usb 3-1: config 172 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 755.907833][T12973] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 755.913425][T12973] PKCS7: Only support pkcs7_signedData type [ 756.741346][ T4439] usb 3-1: string descriptor 0 read error: -22 [ 756.748143][ T4439] usb 3-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 756.773404][ T4439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.833632][ T4439] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 756.850842][T12986] zonefs (nullb0) ERROR: Not a zoned block device [ 757.011432][ T1110] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 757.841036][ T4233] usb 3-1: USB disconnect, device number 40 [ 758.837811][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 759.001481][ T1110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.022656][ T1110] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.178879][ T1110] usb 5-1: config 0 interface 0 has no altsetting 0 [ 759.228660][ T1110] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 759.278451][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.402464][ T1110] usb 5-1: config 0 descriptor?? [ 759.453821][ T1110] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 761.601342][ T5071] usb 5-1: USB disconnect, device number 27 [ 762.752372][T13040] NILFS (loop3): device size too small [ 765.307292][T13066] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 766.372822][T13076] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 770.432262][T13104] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 770.437871][T13104] PKCS7: Only support pkcs7_signedData type [ 770.521393][ T4442] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 770.891621][ T4442] usb 4-1: No LPM exit latency info found, disabling LPM. [ 770.991540][ T4442] usb 4-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 771.005269][ T4442] usb 4-1: config 172 has 1 interface, different from the descriptor's value: 2 [ 771.251458][ T4442] usb 4-1: string descriptor 0 read error: -22 [ 771.261699][ T4442] usb 4-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 771.279456][ T4442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.352598][ T4442] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 771.959319][ T5071] usb 4-1: USB disconnect, device number 34 [ 776.684046][T13170] overlayfs: failed to resolve './file1': -2 [ 776.774861][T13167] kvm: pic: non byte read [ 776.779287][T13167] kvm: pic: non byte read [ 776.831595][T13167] kvm: pic: non byte read [ 776.836087][T13167] kvm: pic: non byte read [ 777.609786][T13167] kvm: pic: non byte read [ 778.312203][T13188] UBIFS error (pid: 13188): cannot open "(null)", error -22 [ 779.536121][T13189] syz.1.2598 (13189) used greatest stack depth: 18192 bytes left [ 781.620818][T13218] overlayfs: failed to resolve './file1': -2 [ 781.709319][T13223] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 781.770479][T13226] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 781.770479][T13226] program syz.0.2607 not setting count and/or reply_len properly [ 782.081235][ T9273] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 782.371258][ T9273] usb 5-1: Using ep0 maxpacket: 16 [ 782.491811][ T9273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.513361][ T9273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.528946][ T9273] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 782.554386][ T9273] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 782.569360][ T9273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.617617][ T9273] usb 5-1: config 0 descriptor?? [ 783.222962][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0x0 [ 783.235914][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0x0 [ 783.343188][T13249] ieee802154 phy0 wpan0: encryption failed: -22 [ 783.357603][T13249] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 783.800158][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0x0 [ 783.826494][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0x0 [ 783.845801][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0x0 [ 783.855893][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0x0 [ 783.866422][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0x0 [ 783.876012][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0xe [ 783.885965][ T9273] apple 0003:05AC:0244.003A: unknown main item tag 0xd [ 783.952949][ T9273] apple 0003:05AC:0244.003A: hidraw0: USB HID v0.04 Device [HID 05ac:0244] on usb-dummy_hcd.4-1/input0 [ 784.024552][ T9273] usb 5-1: USB disconnect, device number 28 [ 784.228248][T13255] fido_id[13255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 785.209034][T13264] overlayfs: failed to resolve './file0': -2 [ 785.363179][ T4197] Bluetooth: hci4: link tx timeout [ 785.368335][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 785.376037][ T4197] Bluetooth: hci4: link tx timeout [ 785.381227][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 786.387570][ T21] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 786.811541][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.841328][ T21] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 786.870932][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.915760][ T21] usb 5-1: config 0 descriptor?? [ 786.963543][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 787.391308][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 787.441351][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 787.483133][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 787.532161][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 787.581502][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 787.631494][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 787.681672][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 787.731604][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 787.791591][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 787.841613][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 787.891613][ T21] pwc: recv_control_msg error -32 req 02 val 2400 [ 788.041605][ T21] pwc: recv_control_msg error -32 req 02 val 2600 [ 788.081329][ T21] pwc: recv_control_msg error -32 req 02 val 2900 [ 788.417960][T13305] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 788.417960][T13305] program syz.0.2631 not setting count and/or reply_len properly [ 789.651367][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 789.661662][ T21] pwc: Registered as video103. [ 789.667688][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 789.724360][ T21] usb 5-1: USB disconnect, device number 29 [ 790.871503][T13325] xt_recent: Unsupported userspace flags (000000de) [ 792.574400][T12658] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 792.854388][T12658] usb 5-1: Using ep0 maxpacket: 32 [ 792.894633][T12658] usb 5-1: no configurations [ 792.899261][T12658] usb 5-1: can't read configurations, error -22 [ 793.140686][T12658] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 793.421455][T12658] usb 5-1: Using ep0 maxpacket: 32 [ 793.463166][T12658] usb 5-1: no configurations [ 793.486259][T12658] usb 5-1: can't read configurations, error -22 [ 793.537668][T12658] usb usb5-port1: attempt power cycle [ 794.041238][T12658] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 794.241344][T12658] usb 5-1: Using ep0 maxpacket: 32 [ 794.951306][T12658] usb 5-1: no configurations [ 794.955938][T12658] usb 5-1: can't read configurations, error -22 [ 795.114161][T12658] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 795.671352][T12658] usb 5-1: device descriptor read/8, error -71 [ 795.791425][T12658] usb usb5-port1: unable to enumerate USB device [ 796.080419][T13364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.108396][T13367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.347007][T13406] usb usb7: usbfs: process 13406 (syz.1.2653) did not claim interface 0 before use [ 801.531404][T12268] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 801.921351][T12268] usb 5-1: Using ep0 maxpacket: 32 [ 801.941226][T12658] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 801.961488][T12268] usb 5-1: no configurations [ 801.966293][T12268] usb 5-1: can't read configurations, error -22 [ 802.133963][T12268] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 802.231432][T12658] usb 2-1: device descriptor read/64, error -71 [ 802.383320][T12268] usb 5-1: Using ep0 maxpacket: 32 [ 802.423824][T12268] usb 5-1: no configurations [ 802.428619][T12268] usb 5-1: can't read configurations, error -22 [ 802.453428][T12268] usb usb5-port1: attempt power cycle [ 802.511256][T12658] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 802.723754][T12658] usb 2-1: device descriptor read/64, error -71 [ 803.904695][T12658] usb usb2-port1: attempt power cycle [ 804.021468][T12268] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 804.261352][T12268] usb 5-1: device not accepting address 36, error -71 [ 804.571380][T13429] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 804.571380][T13429] program syz.1.2666 not setting count and/or reply_len properly [ 805.802015][T13443] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:1536 [ 805.838739][T13445] zonefs (nullb0) ERROR: Not a zoned block device [ 808.692692][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.698968][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.861686][ T4234] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 809.131231][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 809.271401][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.301223][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 809.331326][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 809.829514][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 809.870191][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.887161][T13481] capability: warning: `syz.0.2681' uses 32-bit capabilities (legacy support in use) [ 810.201781][ T4234] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 810.242494][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.329634][ T4234] usb 4-1: Product: syz [ 810.396757][ T4234] usb 4-1: Manufacturer: syz [ 810.462414][ T4234] usb 4-1: SerialNumber: syz [ 810.617631][ T4234] usb 4-1: config 0 descriptor?? [ 810.655612][T13468] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 810.693433][T13486] overlayfs: failed to resolve './file0': -2 [ 810.732901][ T4234] ati_remote_probe: Unexpected desc.bNumEndpoints [ 810.811393][T13495] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 810.811393][T13495] program syz.2.2683 not setting count and/or reply_len properly [ 810.936105][ T9273] usb 4-1: USB disconnect, device number 35 [ 811.043499][ T4234] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 811.291208][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 811.331819][ T4234] usb 2-1: no configurations [ 811.336431][ T4234] usb 2-1: can't read configurations, error -22 [ 811.521237][ T4234] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 812.431339][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 812.471343][ T4234] usb 2-1: no configurations [ 812.475957][ T4234] usb 2-1: can't read configurations, error -22 [ 812.502698][ T4234] usb usb2-port1: attempt power cycle [ 813.461226][ T4234] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 813.581403][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 813.622164][ T4234] usb 2-1: no configurations [ 813.626768][ T4234] usb 2-1: can't read configurations, error -22 [ 814.021363][ T9273] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 814.604494][ T9273] usb 4-1: Using ep0 maxpacket: 16 [ 814.810757][T13525] autofs4:pid:13525:autofs_fill_super: called with bogus options [ 815.173735][ T9273] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.714181][ T9273] usb 4-1: config 0 interface 0 has no altsetting 0 [ 815.720826][ T9273] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 815.745570][T13536] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:1536 [ 815.805486][ T9273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.857255][ T9273] usb 4-1: config 0 descriptor?? [ 816.201325][ T5060] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 816.393497][ T9273] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 816.731426][ T5060] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 816.740571][T13028] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 816.756561][ T5060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.783404][ T5060] usb 3-1: Product: syz [ 816.805286][ T5060] usb 3-1: Manufacturer: syz [ 816.827223][ T5060] usb 3-1: SerialNumber: syz [ 816.853299][ T5060] usb 3-1: config 0 descriptor?? [ 817.222177][T13028] usb 1-1: unable to get BOS descriptor or descriptor too short [ 817.361603][T13028] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 817.401979][ T5060] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 817.414942][T13028] usb 1-1: config 172 has 1 interface, different from the descriptor's value: 2 [ 817.741711][T13028] usb 1-1: string descriptor 0 read error: -22 [ 817.748101][T13028] usb 1-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 817.757505][T13028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.816611][T13560] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 817.816611][T13560] program syz.4.2703 not setting count and/or reply_len properly [ 817.835070][T13028] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 817.861294][ T4442] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 817.971652][ T9273] usb 4-1: USB disconnect, device number 36 [ 818.082849][T13028] usb 1-1: USB disconnect, device number 38 [ 818.090407][T13566] autofs4:pid:13566:autofs_fill_super: called with bogus options [ 818.441239][ T4442] usb 2-1: Using ep0 maxpacket: 32 [ 818.571473][ T4442] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.588457][ T4442] usb 2-1: config 0 has no interfaces? [ 818.761437][ T4442] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 818.799707][ T4442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.811033][ T4442] usb 2-1: Product: syz [ 818.818244][ T4442] usb 2-1: Manufacturer: syz [ 818.824256][ T4442] usb 2-1: SerialNumber: syz [ 818.847003][ T4442] usb 2-1: config 0 descriptor?? [ 819.081270][T13028] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 819.096897][ T4442] usb 2-1: USB disconnect, device number 37 [ 819.343615][ T5060] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 819.373346][ T5060] usb 3-1: USB disconnect, device number 41 [ 819.451488][T13028] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 819.463274][T13028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.484594][T13028] usb 1-1: config 0 descriptor?? [ 819.533198][T13028] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 819.828982][T13582] NILFS (loop1): device size too small [ 819.961290][T13028] gspca_cpia1: usb_control_msg 03, error -71 [ 820.111589][T13028] gspca_cpia1: usb_control_msg 01, error -71 [ 820.117758][T13028] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 820.255961][T13028] usb 1-1: USB disconnect, device number 39 [ 820.525267][T13599] autofs4:pid:13599:autofs_fill_super: called with bogus options [ 820.896040][T13598] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 820.896040][T13598] program syz.4.2715 not setting count and/or reply_len properly [ 821.065333][T13608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 821.065391][T13608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 821.065523][T13601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2717'. [ 821.087540][T13601] lo speed is unknown, defaulting to 1000 [ 821.502736][T12658] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 821.853629][T13620] NILFS (loop4): device size too small [ 822.182206][T13631] autofs4:pid:13631:autofs_fill_super: called with bogus options [ 822.190894][T12658] usb 1-1: Using ep0 maxpacket: 32 [ 822.351468][T12658] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.365043][T12658] usb 1-1: config 0 has no interfaces? [ 823.311472][T12658] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 823.357956][T12658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.391238][T12658] usb 1-1: Product: syz [ 823.395438][T12658] usb 1-1: Manufacturer: syz [ 823.508866][T12658] usb 1-1: SerialNumber: syz [ 823.554710][T12658] usb 1-1: config 0 descriptor?? [ 824.751449][T12658] usb 1-1: can't set config #0, error -71 [ 824.762224][T12658] usb 1-1: USB disconnect, device number 40 [ 825.134509][T12268] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 825.347189][T13667] autofs4:pid:13667:autofs_fill_super: called with bogus options [ 825.561452][T12268] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.907199][T12268] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 825.938494][T12268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.958497][T12268] usb 5-1: config 0 descriptor?? [ 826.861878][T12268] pwc: Askey VC010 type 2 USB webcam detected. [ 826.961359][T12268] pwc: recv_control_msg error -32 req 02 val 2b00 [ 827.016585][T12268] pwc: recv_control_msg error -32 req 02 val 2700 [ 827.065138][T12268] pwc: recv_control_msg error -32 req 02 val 2c00 [ 827.111373][T12268] pwc: recv_control_msg error -32 req 04 val 1000 [ 827.171304][T12268] pwc: recv_control_msg error -32 req 04 val 1300 [ 827.212587][T12268] pwc: recv_control_msg error -32 req 04 val 1400 [ 827.251342][T12268] pwc: recv_control_msg error -32 req 02 val 2000 [ 827.291895][T12268] pwc: recv_control_msg error -32 req 02 val 2100 [ 827.333006][T12268] pwc: recv_control_msg error -32 req 04 val 1500 [ 827.381318][T12268] pwc: recv_control_msg error -32 req 02 val 2500 [ 827.461477][T12268] pwc: recv_control_msg error -32 req 02 val 2400 [ 827.521428][T12268] pwc: recv_control_msg error -32 req 02 val 2600 [ 827.668747][T12268] pwc: recv_control_msg error -32 req 02 val 2900 [ 828.291321][T12268] pwc: recv_control_msg error -71 req 04 val 1200 [ 828.302060][T12268] pwc: Registered as video103. [ 828.334075][T12268] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 828.385825][T13699] usb usb7: usbfs: process 13699 (syz.1.2749) did not claim interface 0 before use [ 828.398486][T12268] usb 5-1: USB disconnect, device number 38 [ 828.654618][ T9273] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 828.671880][T13702] NILFS (loop1): device size too small [ 828.728971][T13706] xt_recent: Unsupported userspace flags (000000de) [ 829.321319][ T9273] usb 3-1: Using ep0 maxpacket: 32 [ 829.602078][ T9273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.676036][ T9273] usb 3-1: config 0 has no interfaces? [ 829.891896][ T9273] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 829.925927][ T9273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.953252][ T9273] usb 3-1: Product: syz [ 829.958253][ T9273] usb 3-1: Manufacturer: syz [ 829.964095][ T9273] usb 3-1: SerialNumber: syz [ 829.983683][ T9273] usb 3-1: config 0 descriptor?? [ 830.682948][ T21] usb 3-1: USB disconnect, device number 42 [ 832.970799][T13742] NILFS (loop3): device size too small [ 833.806185][T13749] xt_recent: Unsupported userspace flags (000000de) [ 835.985399][T13752] autofs4:pid:13752:autofs_fill_super: called with bogus options [ 836.895789][T13771] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 836.895789][T13771] program syz.0.2769 not setting count and/or reply_len properly [ 838.640763][ T21] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 839.771539][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 839.892329][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 839.911327][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 839.922113][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 839.932681][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.963926][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 840.000498][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.373152][ T21] usb 1-1: GET_CAPABILITIES returned 0 [ 840.378754][ T21] usbtmc 1-1:16.0: can't read capabilities [ 841.063989][T13804] autofs4:pid:13804:autofs_fill_super: called with bogus options [ 841.387121][T13807] xt_recent: Unsupported userspace flags (000000de) [ 841.404956][ T4234] usb 1-1: USB disconnect, device number 41 [ 842.229542][T13814] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 842.229542][T13814] program syz.0.2784 not setting count and/or reply_len properly [ 844.349622][ T4197] Bluetooth: hci4: link tx timeout [ 844.355042][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 844.363208][ T4197] Bluetooth: hci4: link tx timeout [ 844.368329][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 847.299672][T13855] autofs4:pid:13855:autofs_fill_super: called with bogus options [ 848.109081][T13864] xt_recent: Unsupported userspace flags (000000de) [ 849.142475][ T4197] Bluetooth: hci4: link tx timeout [ 849.147624][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 849.155403][ T4197] Bluetooth: hci4: link tx timeout [ 849.160519][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 849.932451][T13878] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 849.938034][T13878] PKCS7: Only support pkcs7_signedData type [ 852.089669][T13904] xt_recent: Unsupported userspace flags (000000de) [ 855.064403][ T5070] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 855.220932][T13925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2813'. [ 855.781353][ T5070] usb 3-1: Using ep0 maxpacket: 32 [ 855.911445][ T5070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.841295][ T5070] usb 3-1: string descriptor 0 read error: -71 [ 856.858162][ T5070] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 856.905548][ T5070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.151700][ T5070] usb 3-1: config 0 descriptor?? [ 857.171537][ T5070] usb 3-1: can't set config #0, error -71 [ 857.179662][ T5070] usb 3-1: USB disconnect, device number 43 [ 857.654844][T13946] lo speed is unknown, defaulting to 1000 [ 858.057167][T13954] autofs4:pid:13954:autofs_fill_super: called with bogus options [ 858.725755][T13960] zonefs (nullb0) ERROR: Not a zoned block device [ 860.313517][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 861.331316][ T4234] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 861.411582][T13946] chnl_net:caif_netlink_parms(): no params data found [ 861.601365][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 861.731597][ T4234] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.766618][ T4234] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.797170][ T4234] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 861.841060][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 861.853594][ T4234] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 861.896471][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.939442][ T4234] usb 5-1: config 0 descriptor?? [ 861.978273][ T1523] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.058941][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.076306][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.104986][T13946] device bridge_slave_0 entered promiscuous mode [ 862.168708][ T1523] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.240366][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.260366][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.287231][T13946] device bridge_slave_1 entered promiscuous mode [ 862.371401][T12840] Bluetooth: hci5: command 0x041b tx timeout [ 862.379397][T13946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.427251][T13970] udc-core: couldn't find an available UDC or it's busy [ 862.467012][ T1523] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.484010][T13970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 862.533124][T13946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.678222][ T1523] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.744563][T13946] team0: Port device team_slave_0 added [ 862.758429][ T4234] usb 5-1: USB disconnect, device number 39 [ 863.018360][T13946] team0: Port device team_slave_1 added [ 863.079447][T13946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.097745][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.138241][T13946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.408934][T13946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.461248][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.489026][T13946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.322998][T13946] device hsr_slave_0 entered promiscuous mode [ 864.343545][T13946] device hsr_slave_1 entered promiscuous mode [ 864.360563][T13946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 864.434861][T13946] Cannot create hsr debugfs directory [ 864.453120][ T4439] Bluetooth: hci5: command 0x040f tx timeout [ 864.568416][T14011] zonefs (nullb0) ERROR: Not a zoned block device [ 865.360324][T14015] autofs4:pid:14015:autofs_fill_super: called with bogus options [ 867.093516][ T4439] Bluetooth: hci5: command 0x0419 tx timeout [ 867.843756][T13946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 867.898050][T13946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 867.976161][T13946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 868.024696][T13946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 868.391654][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.457748][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 868.481908][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 868.529339][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.565982][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 868.605208][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 868.655647][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.662777][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.752706][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 868.797843][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 868.849442][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 868.903685][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.910806][ T4659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.998219][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 869.042163][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 869.109941][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 869.192708][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 869.227203][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 869.275261][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 869.364889][ T1523] bond0: (slave wlan1): Releasing backup interface [ 869.452589][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 869.484859][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 869.531809][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 869.540194][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 869.579377][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 869.696742][T13946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 869.893081][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.899395][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.520515][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2844'. [ 870.687819][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 870.717005][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 870.750399][T13946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.770432][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2844'. [ 870.820405][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 870.842829][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 870.892005][ T1523] device hsr_slave_0 left promiscuous mode [ 870.902368][ T1523] device hsr_slave_1 left promiscuous mode [ 870.924285][ T1523] device bridge_slave_1 left promiscuous mode [ 870.942472][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.972262][ T1523] device bridge_slave_0 left promiscuous mode [ 871.003873][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.195782][ T1523] device veth1_macvtap left promiscuous mode [ 871.202806][ T1523] device veth0_macvtap left promiscuous mode [ 871.209508][ T1523] device veth1_vlan left promiscuous mode [ 871.216202][ T1523] device veth0_vlan left promiscuous mode [ 871.272040][T12840] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 871.488108][T14087] zonefs (nullb0) ERROR: Not a zoned block device [ 871.593245][T12840] usb 1-1: Using ep0 maxpacket: 32 [ 871.739418][T12840] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 871.751294][T12840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.783419][T12840] usb 1-1: config 0 has no interface number 0 [ 871.789537][T12840] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 871.898288][ T4853] smc: removing ib device syz2 [ 871.961538][T12840] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 871.998487][T12840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.029148][T12840] usb 1-1: Product: syz [ 872.035971][T12840] usb 1-1: Manufacturer: syz [ 872.040812][T12840] usb 1-1: SerialNumber: syz [ 872.064829][T12840] usb 1-1: config 0 descriptor?? [ 872.109029][T12840] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 872.148763][T12840] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 872.223337][ T1523] team0 (unregistering): Port device team_slave_1 removed [ 872.434755][ T1523] team0 (unregistering): Port device team_slave_0 removed [ 872.471090][ T1523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.588146][ T1523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.751355][T12840] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 872.765583][T12840] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 873.065795][ T1523] bond0 (unregistering): Released all slaves [ 873.181084][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 873.219879][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 873.244163][T13946] device veth0_vlan entered promiscuous mode [ 873.258722][T13946] device veth1_vlan entered promiscuous mode [ 873.280903][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 873.318527][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 873.377177][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 873.388895][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 873.410529][T13946] device veth0_macvtap entered promiscuous mode [ 873.478977][T13946] device veth1_macvtap entered promiscuous mode [ 873.562641][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.639378][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.691811][T13946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.726417][T14101] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2851'. [ 873.755077][T14101] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2851'. [ 873.795749][T14101] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2851'. [ 873.836150][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 873.855329][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 873.898932][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 873.968709][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 874.382666][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.385255][ T21] usb 1-1: USB disconnect, device number 42 [ 874.489040][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.587654][T13946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.670282][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 874.743930][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 874.946429][T13946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.990210][T13946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.008946][T13946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.028490][T13946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.074228][T14109] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 875.435268][ T5424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.443225][ T5424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.611370][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 876.249847][ T4720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.793224][T14127] zonefs (nullb0) ERROR: Not a zoned block device [ 876.871728][ T4720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.922001][T12577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 880.906702][T14140] bridge0: port 1(erspan0) entered blocking state [ 880.913420][T14140] bridge0: port 1(erspan0) entered disabled state [ 880.920583][T14140] device erspan0 entered promiscuous mode [ 880.927429][T14140] bridge0: port 1(erspan0) entered blocking state [ 880.934076][T14140] bridge0: port 1(erspan0) entered forwarding state [ 880.952016][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2866'. [ 880.961060][T14146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2866'. [ 881.080406][T14149] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 882.928333][T14165] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2871'. [ 884.056973][T14180] zonefs (nullb0) ERROR: Not a zoned block device [ 884.750442][T14189] NILFS (loop1): device size too small [ 888.194707][T14213] syz.2.2884 (14213): drop_caches: 2 [ 889.121366][ T4448] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 890.621244][ T4448] usb 1-1: Using ep0 maxpacket: 16 [ 890.661625][ T4448] usb 1-1: no configurations [ 890.666251][ T4448] usb 1-1: can't read configurations, error -22 [ 890.960153][ T4202] Bluetooth: hci4: link tx timeout [ 890.966275][ T4202] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 890.974212][ T4202] Bluetooth: hci4: link tx timeout [ 890.979644][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 891.520479][ T4448] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 891.645882][T14251] lo speed is unknown, defaulting to 1000 [ 891.791239][ T4448] usb 1-1: Using ep0 maxpacket: 16 [ 891.841347][ T4448] usb 1-1: no configurations [ 891.845970][ T4448] usb 1-1: can't read configurations, error -22 [ 891.969855][ T4448] usb usb1-port1: attempt power cycle [ 892.021506][ T1110] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 892.341388][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 892.481317][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.495457][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.511493][ T1110] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 892.541373][ T1110] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 892.560094][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.589340][ T1110] usb 5-1: config 0 descriptor?? [ 892.931658][ T4448] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 893.021486][ T4448] usb 1-1: device descriptor read/8, error -71 [ 893.573669][ T4448] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 894.320301][ T1110] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 894.336857][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.340350][T14251] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 894.351213][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.559662][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.571260][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.586130][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.603819][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.631276][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.652135][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.842377][ T4448] usb 1-1: device not accepting address 46, error -71 [ 894.851315][ T4448] usb usb1-port1: unable to enumerate USB device [ 894.858036][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 894.865641][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 896.073526][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 896.215753][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 896.233540][ T1110] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 896.304248][T14285] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 896.364018][ T1110] microsoft 0003:045E:07DA.003C: No inputs registered, leaving [ 896.407209][ T1110] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 896.459535][ T1110] microsoft 0003:045E:07DA.003C: no inputs found [ 896.489895][ T1110] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 896.936037][ T1110] usb 5-1: USB disconnect, device number 40 [ 897.924742][T14288] fido_id[14288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 900.098374][T14302] usb usb7: usbfs: process 14302 (syz.0.2907) did not claim interface 0 before use [ 902.831102][T14325] lo speed is unknown, defaulting to 1000 [ 903.654509][T14325] chnl_net:caif_netlink_parms(): no params data found [ 904.619591][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.713644][T14325] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.743256][T14325] device bridge_slave_0 entered promiscuous mode [ 904.770653][T14325] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.831280][T14325] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.848608][T14325] device bridge_slave_1 entered promiscuous mode [ 904.861321][T12268] Bluetooth: hci0: command 0x0409 tx timeout [ 904.894409][T14342] usb usb7: usbfs: process 14342 (syz.1.2920) did not claim interface 0 before use [ 904.938284][T14325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.002576][T14325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.141559][T14325] team0: Port device team_slave_0 added [ 905.170197][T14325] team0: Port device team_slave_1 added [ 906.061094][T14325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.166979][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.201685][T14352] overlayfs: missing 'workdir' [ 906.267192][T14325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.331706][T14325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.338673][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.460359][T14325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.931434][T12268] Bluetooth: hci0: command 0x041b tx timeout [ 907.118160][T14325] device hsr_slave_0 entered promiscuous mode [ 907.160888][T14359] zonefs (nullb0) ERROR: Not a zoned block device [ 907.317677][T14325] device hsr_slave_1 entered promiscuous mode [ 907.501991][T14325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 907.701369][T14325] Cannot create hsr debugfs directory [ 908.073778][T14325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 908.104308][T14325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 908.114943][T14325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 908.130897][T14325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 908.328591][T14325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.366951][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 908.384065][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.421912][T14325] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.472485][ T4853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.550296][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.564688][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.603738][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.610949][T14091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.687134][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 908.724429][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.762648][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.769842][T14091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.807567][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 908.839512][T14369] device syzkaller0 entered promiscuous mode [ 908.914322][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 908.931875][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 909.030006][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 909.038917][T14286] Bluetooth: hci0: command 0x040f tx timeout [ 909.042720][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 909.053722][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 909.743589][ T4853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.855656][T14325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 909.929987][T14325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.997792][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 910.013494][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 910.139882][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 910.157871][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 910.176880][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 910.321408][ T4439] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 910.571263][ T4439] usb 1-1: Using ep0 maxpacket: 16 [ 910.691895][ T4439] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 910.931286][ T4439] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 910.950862][ T4439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.971070][ T4439] usb 1-1: Product: syz [ 910.980649][ T4439] usb 1-1: Manufacturer: syz [ 910.988491][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 911.003565][ T4439] usb 1-1: SerialNumber: syz [ 911.057921][T14384] overlayfs: missing 'workdir' [ 911.063457][ T4439] usb 1-1: config 0 descriptor?? [ 911.080477][ T4853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.091483][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 911.152251][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 911.205989][ T4853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.736059][T14325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.746520][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 911.757214][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.291516][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 912.314076][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 912.395688][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 912.418449][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 912.463471][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 912.489002][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 912.548108][T14325] device veth0_vlan entered promiscuous mode [ 912.773651][T14325] device veth1_vlan entered promiscuous mode [ 913.150513][T14429] overlayfs: failed to resolve './file0': -2 [ 913.485052][ T4234] usb 1-1: USB disconnect, device number 47 [ 913.693847][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 913.752294][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 913.786117][T14325] device veth0_macvtap entered promiscuous mode [ 913.855928][ T4202] Bluetooth: hci4: link tx timeout [ 913.861096][ T4202] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 913.869108][ T4202] Bluetooth: hci4: link tx timeout [ 913.874274][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 913.892529][T14325] device veth1_macvtap entered promiscuous mode [ 913.967165][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 913.981864][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 914.000739][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 914.029028][T14325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.061729][T14325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.100371][T14325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.160637][T14325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.195767][T14325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.267218][ T4853] device hsr_slave_0 left promiscuous mode [ 914.275314][ T4853] device hsr_slave_1 left promiscuous mode [ 914.316481][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.334789][ T4853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.355578][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.374575][ T4853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.406913][ T4853] device bridge_slave_1 left promiscuous mode [ 914.480712][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.541290][ T4853] device bridge_slave_0 left promiscuous mode [ 914.547506][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.032080][T14449] overlayfs: missing 'workdir' [ 915.040971][ T4853] device veth1_macvtap left promiscuous mode [ 915.068246][ T4853] device veth0_macvtap left promiscuous mode [ 915.084892][ T4853] device veth1_vlan left promiscuous mode [ 915.117066][ T4853] device veth0_vlan left promiscuous mode [ 915.163688][T14452] overlayfs: failed to resolve './file1': -2 [ 916.407572][ T4853] team0 (unregistering): Port device team_slave_1 removed [ 916.483054][ T4853] team0 (unregistering): Port device team_slave_0 removed [ 916.505315][ T4853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.537873][ T4853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.703577][ T4853] bond0 (unregistering): Released all slaves [ 916.785203][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 916.812814][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 916.824197][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 916.867253][T14325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.879447][T14325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.912221][T14325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.924990][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 916.938249][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 916.954039][T14325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.966917][T14325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.978433][T14325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.992289][T14325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.274626][T14286] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 917.735289][T14091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.749956][T14091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.796448][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 917.823309][T14091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.857862][T14091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.916304][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 918.131251][T14286] usb 1-1: Using ep0 maxpacket: 8 [ 921.131861][T14501] overlayfs: missing 'lowerdir' [ 921.201380][T14286] usb 1-1: unable to read config index 0 descriptor/all [ 921.218764][T14286] usb 1-1: can't read configurations, error -71 [ 921.511489][ T4233] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 922.161414][ T4233] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.179273][ T4233] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 922.189612][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.231415][ T4233] usb 3-1: config 0 descriptor?? [ 922.288561][ T4233] pwc: Askey VC010 type 2 USB webcam detected. [ 922.702823][ T4233] pwc: recv_control_msg error -32 req 02 val 2b00 [ 922.865537][ T4233] pwc: recv_control_msg error -32 req 02 val 2700 [ 923.711986][ T4233] pwc: recv_control_msg error -32 req 02 val 2c00 [ 923.765160][ T4233] pwc: recv_control_msg error -32 req 04 val 1000 [ 923.851385][ T4233] pwc: recv_control_msg error -32 req 04 val 1300 [ 923.901444][ T4233] pwc: recv_control_msg error -32 req 04 val 1400 [ 923.956821][ T4233] pwc: recv_control_msg error -32 req 02 val 2000 [ 924.021432][ T4233] pwc: recv_control_msg error -32 req 02 val 2100 [ 924.645693][ T4233] pwc: recv_control_msg error -32 req 04 val 1500 [ 924.731714][ T4233] pwc: recv_control_msg error -32 req 02 val 2500 [ 924.782303][ T4233] pwc: recv_control_msg error -32 req 02 val 2400 [ 924.831922][ T4233] pwc: recv_control_msg error -32 req 02 val 2600 [ 924.882721][ T4233] pwc: recv_control_msg error -32 req 02 val 2900 [ 925.151362][ T9273] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 925.387099][ T4233] pwc: recv_control_msg error -71 req 04 val 1200 [ 925.412618][ T9273] usb 6-1: Using ep0 maxpacket: 16 [ 925.565414][ T4233] pwc: Registered as video103. [ 925.583400][ T4233] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 925.754954][ T4233] usb 3-1: USB disconnect, device number 44 [ 926.331490][ T9273] usb 6-1: config 0 has no interfaces? [ 926.347218][ T9273] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 926.396396][ T9273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.438480][ T9273] usb 6-1: config 0 descriptor?? [ 928.338298][T14286] usb 6-1: USB disconnect, device number 2 [ 928.358644][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 929.852430][ T9273] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 930.381338][ T9273] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 930.401537][ T9273] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 930.441262][ T9273] usb 5-1: Product: syz [ 930.461628][ T9273] usb 5-1: Manufacturer: syz [ 930.466282][ T9273] usb 5-1: SerialNumber: syz [ 930.545404][ T9273] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 931.335494][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.336069][T14662] zonefs (nullb0) ERROR: Not a zoned block device [ 931.341888][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.351582][ T9273] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 931.889563][ T9273] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 931.924232][ T9273] usb 5-1: USB disconnect, device number 41 [ 932.367721][T14683] overlayfs: failed to resolve './file0': -2 [ 932.549244][ T9273] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 932.602712][T14684] lo speed is unknown, defaulting to 1000 [ 932.801468][ T9273] usb 6-1: Using ep0 maxpacket: 16 [ 932.921939][ T9273] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 932.980874][ T9273] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 933.143358][ T9273] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 933.346951][ T9273] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 933.367028][ T9273] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 933.377433][ T9273] usb 6-1: config 1 interface 0 has no altsetting 0 [ 933.389809][ T9273] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 933.409045][ T9273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.532662][ T9273] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 933.646782][ T5424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.600978][ T5424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.612122][ T4448] Bluetooth: hci5: command 0x0409 tx timeout [ 934.620231][ T9273] scsi host1: usb-storage 6-1:1.0 [ 934.785580][T14684] chnl_net:caif_netlink_parms(): no params data found [ 935.674469][ T1225] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 936.230921][ T5424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.305223][T14684] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.318654][T14684] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.368393][ T1225] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 936.512556][T14684] device bridge_slave_0 entered promiscuous mode [ 936.526275][T14736] zonefs (nullb0) ERROR: Not a zoned block device [ 936.583326][ T5424] device netdevsim0 left promiscuous mode [ 936.599521][ T5424] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.630256][ T4234] usb 6-1: USB disconnect, device number 3 [ 936.683300][T12577] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 936.732355][T12577] sd 1:0:0:0: [sdb] Sense not available. [ 936.776662][T12577] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 936.800104][ T4448] Bluetooth: hci5: command 0x041b tx timeout [ 936.808501][ T4197] Bluetooth: hci4: link tx timeout [ 936.813693][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 936.821831][ T4197] Bluetooth: hci4: link tx timeout [ 936.826937][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 937.996179][T14684] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.001205][T12577] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 938.009133][T12577] sd 1:0:0:0: [sdb] Write Protect is off [ 938.011299][T14684] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.054953][T14684] device bridge_slave_1 entered promiscuous mode [ 938.092474][T12577] sd 1:0:0:0: [sdb] Asking for cache data failed [ 938.101313][T12577] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 938.153774][T14684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.183940][T12577] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 938.282709][T12577] sd 1:0:0:0: [sdb] Sense not available. [ 938.288514][T12577] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 938.313065][T14684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.379835][T14684] team0: Port device team_slave_0 added [ 938.396310][T14684] team0: Port device team_slave_1 added [ 938.498721][T14684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.562510][T14684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.706216][T14684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.745681][ T5424] tipc: Left network mode [ 938.755730][T14684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.806640][T14684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.909679][T14684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.129089][ T4542] udevd[4542]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 939.163304][T14684] device hsr_slave_0 entered promiscuous mode [ 939.207415][T14684] device hsr_slave_1 entered promiscuous mode [ 939.248120][T14684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.292966][T14684] Cannot create hsr debugfs directory [ 939.775778][T14778] device syzkaller0 entered promiscuous mode [ 940.162312][ T4234] Bluetooth: hci5: command 0x040f tx timeout [ 940.557512][ T5424] bond0: (slave wlan1): Releasing backup interface [ 940.607369][ T5424] bond0: Destroying bond [ 941.164537][ T5424] bond0 (unregistering): Released all slaves [ 942.463719][ T4442] Bluetooth: hci5: command 0x0419 tx timeout [ 942.526640][T14684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 942.555571][T14684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 942.567383][T14684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 942.597894][T14684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 942.925868][ T5424] device dummy0 left promiscuous mode [ 942.943197][ T5424] device hsr_slave_0 left promiscuous mode [ 942.946148][ T5424] device hsr_slave_1 left promiscuous mode [ 942.950783][ T5424] device veth1_macvtap left promiscuous mode [ 942.950854][ T5424] device veth0_macvtap left promiscuous mode [ 942.950928][ T5424] device veth1_vlan left promiscuous mode [ 942.950990][ T5424] device veth0_vlan left promiscuous mode [ 943.663507][ T5424] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 943.701805][ T4197] Bluetooth: hci3: Unknown advertising packet type: 0x3030 [ 943.702114][ T4197] ================================================================== [ 943.717897][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 943.725724][ T4197] Read of size 1 at addr ffff888076b9ac05 by task kworker/u5:3/4197 [ 943.733704][ T4197] [ 943.736033][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 943.743577][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.753628][ T4197] Workqueue: hci3 hci_rx_work [ 943.758322][ T4197] Call Trace: [ 943.761597][ T4197] [ 943.764528][ T4197] dump_stack_lvl+0x188/0x250 [ 943.769221][ T4197] ? show_regs_print_info+0x20/0x20 [ 943.774439][ T4197] ? load_image+0x400/0x400 [ 943.778943][ T4197] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 943.784417][ T4197] print_address_description+0x60/0x2d0 [ 943.789966][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 943.795085][ T4197] kasan_report+0xdf/0x130 [ 943.799511][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 943.804716][ T4197] hci_le_meta_evt+0x133f/0x3c90 [ 943.809677][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 943.815760][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 943.821401][ T4197] ? mark_lock+0x94/0x320 [ 943.825732][ T4197] ? mutex_unlock+0x10/0x10 [ 943.830238][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 943.836218][ T4197] ? lock_chain_count+0x20/0x20 [ 943.841058][ T4197] ? __rwlock_init+0x140/0x140 [ 943.845807][ T4197] hci_event_packet+0xe48/0x1370 [ 943.850725][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 943.855911][ T4197] ? rcu_lock_release+0x20/0x20 [ 943.860746][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 943.865927][ T4197] hci_rx_work+0x255/0xa10 [ 943.870337][ T4197] process_one_work+0x85f/0x1010 [ 943.875279][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 943.880890][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 943.886160][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 943.891167][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 943.896695][ T4197] ? wq_worker_running+0x97/0x170 [ 943.901701][ T4197] worker_thread+0xaa6/0x1290 [ 943.906384][ T4197] kthread+0x436/0x520 [ 943.910433][ T4197] ? rcu_lock_release+0x20/0x20 [ 943.915267][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 943.919838][ T4197] ret_from_fork+0x1f/0x30 [ 943.924250][ T4197] [ 943.927251][ T4197] [ 943.929554][ T4197] Allocated by task 14830: [ 943.933943][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 943.938515][ T4197] __alloc_skb+0x22c/0x750 [ 943.942912][ T4197] vhci_write+0xbc/0x450 [ 943.947135][ T4197] vfs_write+0x745/0xd60 [ 943.951355][ T4197] ksys_write+0x152/0x260 [ 943.955660][ T4197] do_syscall_64+0x4c/0xa0 [ 943.960053][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 943.965925][ T4197] [ 943.968243][ T4197] Last potentially related work creation: [ 943.973930][ T4197] kasan_save_stack+0x35/0x60 [ 943.978676][ T4197] kasan_record_aux_stack+0xb8/0x100 [ 943.983941][ T4197] call_rcu+0x189/0x950 [ 943.988075][ T4197] sctp_backlog_rcv+0x1b2/0x3c0 [ 943.992904][ T4197] __release_sock+0x1e1/0x450 [ 943.997559][ T4197] release_sock+0x5b/0x1b0 [ 944.001955][ T4197] sctp_wait_for_connect+0x38b/0x680 [ 944.007220][ T4197] sctp_sendmsg_to_asoc+0x17bd/0x1d90 [ 944.012573][ T4197] sctp_sendmsg+0x196a/0x2900 [ 944.017253][ T4197] __sys_sendto+0x46d/0x620 [ 944.021735][ T4197] __x64_sys_sendto+0xda/0xf0 [ 944.026387][ T4197] do_syscall_64+0x4c/0xa0 [ 944.030780][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 944.036652][ T4197] [ 944.038954][ T4197] Second to last potentially related work creation: [ 944.045511][ T4197] kasan_save_stack+0x35/0x60 [ 944.050168][ T4197] kasan_record_aux_stack+0xb8/0x100 [ 944.055430][ T4197] kvfree_call_rcu+0x105/0x7d0 [ 944.060173][ T4197] cgroup_migrate_finish+0x19f/0x370 [ 944.065434][ T4197] cgroup_attach_task+0x549/0x7b0 [ 944.070435][ T4197] cgroup_attach_task_all+0xb0/0x140 [ 944.075701][ T4197] vhost_attach_cgroups_work+0x3e/0x80 [ 944.081143][ T4197] vhost_worker+0x1f9/0x320 [ 944.085627][ T4197] kthread+0x436/0x520 [ 944.089675][ T4197] ret_from_fork+0x1f/0x30 [ 944.094071][ T4197] [ 944.096375][ T4197] The buggy address belongs to the object at ffff888076b9a800 [ 944.096375][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 944.110402][ T4197] The buggy address is located 5 bytes to the right of [ 944.110402][ T4197] 1024-byte region [ffff888076b9a800, ffff888076b9ac00) [ 944.124089][ T4197] The buggy address belongs to the page: [ 944.129697][ T4197] page:ffffea0001dae600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888076b9f000 pfn:0x76b98 [ 944.141130][ T4197] head:ffffea0001dae600 order:3 compound_mapcount:0 compound_pincount:0 [ 944.149434][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 944.157408][ T4197] raw: 00fff00000010200 ffffea000091ce00 0000000600000006 ffff888016c41dc0 [ 944.165971][ T4197] raw: ffff888076b9f000 0000000080100008 00000001ffffffff 0000000000000000 [ 944.174528][ T4197] page dumped because: kasan: bad access detected [ 944.180919][ T4197] page_owner tracks the page as allocated [ 944.186607][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4071, ts 39217914931, free_ts 39217757263 [ 944.205681][ T4197] get_page_from_freelist+0x1bbd/0x1ca0 [ 944.211214][ T4197] __alloc_pages+0x1ee/0x480 [ 944.215781][ T4197] new_slab+0xc0/0x4b0 [ 944.219834][ T4197] ___slab_alloc+0x80a/0xdd0 [ 944.224401][ T4197] __kmalloc+0x1cd/0x330 [ 944.228622][ T4197] load_elf_phdrs+0x132/0x230 [ 944.233282][ T4197] load_elf_binary+0x962/0x28e0 [ 944.238113][ T4197] bprm_execve+0xaee/0x1840 [ 944.242594][ T4197] do_execveat_common+0x51e/0x6d0 [ 944.247597][ T4197] __x64_sys_execve+0x8e/0xa0 [ 944.252255][ T4197] do_syscall_64+0x4c/0xa0 [ 944.256649][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 944.262520][ T4197] page last free stack trace: [ 944.267165][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 944.272616][ T4197] free_unref_page+0x8f/0x2a0 [ 944.277271][ T4197] qlist_free_all+0x35/0x90 [ 944.281751][ T4197] kasan_quarantine_reduce+0x150/0x160 [ 944.287186][ T4197] __kasan_slab_alloc+0x2f/0xd0 [ 944.292017][ T4197] slab_post_alloc_hook+0x4c/0x380 [ 944.297107][ T4197] __kmalloc_track_caller+0x125/0x330 [ 944.302458][ T4197] kstrdup+0x32/0x70 [ 944.306330][ T4197] bprm_change_interp+0x7e/0xb0 [ 944.311158][ T4197] load_script+0x6c7/0x850 [ 944.315557][ T4197] bprm_execve+0xaee/0x1840 [ 944.320036][ T4197] do_execveat_common+0x51e/0x6d0 [ 944.325037][ T4197] __x64_sys_execve+0x8e/0xa0 [ 944.329691][ T4197] do_syscall_64+0x4c/0xa0 [ 944.334090][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 944.339963][ T4197] [ 944.342265][ T4197] Memory state around the buggy address: [ 944.347871][ T4197] ffff888076b9ab00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.355907][ T4197] ffff888076b9ab80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.363945][ T4197] >ffff888076b9ac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 944.371980][ T4197] ^ [ 944.376025][ T4197] ffff888076b9ac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 944.384061][ T4197] ffff888076b9ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 944.392094][ T4197] ================================================================== [ 944.400127][ T4197] Disabling lock debugging due to kernel taint [ 944.409073][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 944.416273][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:3 Tainted: G B syzkaller #0 [ 944.425199][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 944.435245][ T4197] Workqueue: hci3 hci_rx_work [ 944.439488][ T5424] device wireguard0 left promiscuous mode [ 944.439931][ T4197] Call Trace: [ 944.439938][ T4197] [ 944.451809][ T4197] dump_stack_lvl+0x188/0x250 [ 944.456481][ T4197] ? show_regs_print_info+0x20/0x20 [ 944.461678][ T4197] ? load_image+0x400/0x400 [ 944.466184][ T4197] panic+0x2e5/0x810 [ 944.470084][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 944.474583][ T4197] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 944.480556][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 944.485400][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 944.490506][ T4197] check_panic_on_warn+0x80/0xa0 [ 944.495438][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 944.500540][ T4197] end_report+0x6d/0xf0 [ 944.504688][ T4197] kasan_report+0x102/0x130 [ 944.509193][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 944.514297][ T4197] hci_le_meta_evt+0x133f/0x3c90 [ 944.519236][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 944.525297][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 944.530928][ T4197] ? mark_lock+0x94/0x320 [ 944.535252][ T4197] ? mutex_unlock+0x10/0x10 [ 944.539749][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 944.545722][ T4197] ? lock_chain_count+0x20/0x20 [ 944.550577][ T4197] ? __rwlock_init+0x140/0x140 [ 944.555338][ T4197] hci_event_packet+0xe48/0x1370 [ 944.560270][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 944.565470][ T4197] ? rcu_lock_release+0x20/0x20 [ 944.570324][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 944.575515][ T4197] hci_rx_work+0x255/0xa10 [ 944.579932][ T4197] process_one_work+0x85f/0x1010 [ 944.584866][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 944.590488][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 944.595771][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 944.600786][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 944.606321][ T4197] ? wq_worker_running+0x97/0x170 [ 944.611338][ T4197] worker_thread+0xaa6/0x1290 [ 944.616020][ T4197] kthread+0x436/0x520 [ 944.620088][ T4197] ? rcu_lock_release+0x20/0x20 [ 944.624933][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 944.629516][ T4197] ret_from_fork+0x1f/0x30 [ 944.633931][ T4197] [ 944.637204][ T4197] Kernel Offset: disabled [ 944.641513][ T4197] Rebooting in 86400 seconds..