last executing test programs: 14m15.044677369s ago: executing program 3 (id=616): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)=ANY=[@ANYBLOB=' \x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) 14m10.989068471s ago: executing program 3 (id=631): prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa00) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000080)={{}, {0xe}, 0x40000, 0xba}) syz_open_dev$sndctrl(0x0, 0x6, 0x22a02) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1) r5 = fcntl$getown(0xffffffffffffffff, 0x9) syz_clone3(&(0x7f00000022c0)={0x4aa00, 0x0, 0x0, &(0x7f0000001140), {0x22}, 0x0, 0x0, &(0x7f0000002180)=""/202, 0x0}, 0x58) kcmp(r5, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) 14m9.693806025s ago: executing program 3 (id=635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) preadv2(r2, &(0x7f0000001840)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000680)=""/24, 0x18}, {&(0x7f00000006c0)=""/119, 0x77}], 0x3, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 14m8.172509869s ago: executing program 3 (id=643): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000780)={r2, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r3}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x8}) sendmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x40000) socket(0x1000000000000010, 0x80802, 0x0) socket$packet(0x11, 0x2, 0x300) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x40042, 0x1) close(0x3) 13m59.582475087s ago: executing program 3 (id=664): r0 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x52) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000040)={0x66, 0x7, 0x35, 0x15, "5fa1fda640479e153cae69970ee725be80296d8084"}, 0x35, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x4000, 0x3, 0x846}) io_uring_register$IORING_REGISTER_FILES(r4, 0x25, &(0x7f0000000000)=[r4], 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 13m58.138650982s ago: executing program 3 (id=666): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) mprotect(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000140)=0xfff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 13m42.727777877s ago: executing program 32 (id=666): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) mprotect(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000140)=0xfff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 38.395765693s ago: executing program 0 (id=4105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 37.468079097s ago: executing program 0 (id=4109): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e70000", @ANYBLOB="b70795"], 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x400004cc6, 0x101183) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ptrace$pokeuser(0x6, 0x0, 0x108, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(r1, r0, 0x0) 9.19570761s ago: executing program 5 (id=4200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.019805084s ago: executing program 1 (id=4205): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.83986621s ago: executing program 5 (id=4206): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x1c23, &(0x7f0000000040)={0x0, 0x8835a, 0xc000, 0x200008, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 7.53416047s ago: executing program 4 (id=4208): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x3, &(0x7f0000000400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, 0x0, 0x0]) write$eventfd(r1, 0x0, 0x0) 7.488346875s ago: executing program 1 (id=4209): ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x4000000) r3 = socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c031c718c25bf1fad710d0000"], 0xf) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000400)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0xd, 0x6, 0x106, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) r5 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000140)={0xfffffffc, 0x0, 0x3011, 0xfffffffe, 0xa, 0x0, 0x5af}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a052e62a6000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r8, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0xfff, 0x5, '\x00', 0x13}) 6.802219893s ago: executing program 5 (id=4211): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) writev(r0, &(0x7f00000016c0)=[{0x0}, {0x0}], 0x2) 5.718409448s ago: executing program 5 (id=4212): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r1, 0x8108551b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) 5.525952447s ago: executing program 4 (id=4214): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0) read$FUSE(r0, &(0x7f0000006b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000201e044030400001020301090292000301062005080b00010101304b0904000000010130000a2401052e00060000001324030506030604ff0c00000003"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x1192410, 0x0, 0x0, 0x81}}, 0x50) sendmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="324b708a36f70ef4e953a25630ff58a9e0b0316443c88bc1cd1a87ba2705be8cb067b37079c6cb3dd010bc", 0x2b}, {&(0x7f0000000380)="80aef34022303daf7d68de31aa19498b18696473a1e2a4ec6201d4e04dc8776f500ac0bdea8eb418f5e9224c2a739367ca6d6cb7ce57378682dcc2850408c82b5621dd246c7da9819969bc8051296bf14ab8b78c9d9f027d70bcae7a99cbc360ad186288399bfe4e421388f443111f0f7b91e201e95e4858c1eafc30966ac4cb1f492b16390b999712312f8d6e84f514ad139863f6d4c751334496e692f21d4960d0eb7fa0e976025f8891ed8974247ea9e4f5a19fa7f0130315", 0xba}, {&(0x7f0000000440)="9a4c586200d44a9ac334d65b6a3e9f7bef3c113b349cc4a203f5ca6586bd43b3a64ef7fe", 0x24}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r1, r8}}}], 0x20, 0x4810}, 0x20000085) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0009002dbd7000fbdbdf250a060000000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x1}}) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 4.157071828s ago: executing program 2 (id=4215): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x18}) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x1, 0x1, 0x7, 0x2, 0x0, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.989729472s ago: executing program 2 (id=4216): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000070) 2.950994549s ago: executing program 4 (id=4217): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000200)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 2.87240292s ago: executing program 0 (id=4118): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001) r3 = fcntl$dupfd(r2, 0x0, r2) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r3, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000002c0)) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 2.817081856s ago: executing program 2 (id=4218): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r3 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000640)={{0x3, 0x5}, 0x100, './file0\x00'}) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000000), 0x90) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) 2.323939867s ago: executing program 1 (id=4219): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r2, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x40804) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 2.26594616s ago: executing program 5 (id=4220): futex(&(0x7f0000000300)=0x1, 0xc, 0x1, 0x0, &(0x7f0000000400)=0x2, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x400c844) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @random="3481c669c6d4", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @local, {[@hopopts={0x8, 0x3, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0xb61}]}]}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000d40)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x202b, 0xc, 0xb745, 0xd}}, @wr_crn={0x67, 0x20, {0x4}}, @nested_amd_clgi={0x17f, 0x10}], 0x68}) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000140)=@llc={0x1a, 0xdb07b982c8b3e5c8, 0x40, 0xf9, 0x81, 0x5, @remote}, 0x80, &(0x7f0000002140)=[{0x0}, {&(0x7f0000000e00)="827a6ba1d26d412a6e8b84212fe836b879d1a1ed727322b88d452bd6a741578c417b5011f6ddb7a352ef310a769e2c6b107b75771b30c96eeff0735a3650c62a1c0491d50a1a02d87beb8913362828c10502626c80781f661cd56bb2a3cef44b5b0fefb141bf4c462b1edb1854767885ebfb22f22a22a2a27f06e64642d8ad44d8ddeb232ea4e43d68ca4c06dee72ddece10e343b99652785f7a041f7aae83fc4c4f745fd185ca973a5c59ba7075fc24e312d94310368cb8b9ccf473ab13bef8dc6e8e143109ea8ea6abee3c47dd2d1d93c6d4a1b05f33fafa33c1c2aa92854e8870931002ddbe8b5a0a87a30cf571aef1f171a04b605a913be9fa176d713471f0b97e28e43e90e49fa9e8053377e76508f8e578b555c670f13d46623f805ce2d761decf17777fb426e2b5712b558ac874ab163ca0c5e820df708b8a17c96523d519e7d350911bd6c16c3989098cb61eb045e685bc906a9ae45ee7ebc6dab907c03a4532271a017795183ba354ad8a528e8cac7033a8fcf68857d594e3b4bb595b17b4b5fe377908d0e49ce03465cab85ea2c3ce03fe85273050977626a1b8199da266497c139e91b68373f4014a473f87b87fc81f90f7752947cbeb528553e9ebc64d0578568f53196ca94ce8de569c80c415e074d62a64459be00f2d60a682b7d9577826a56f5a3a7df1c1ff68bc7287fc19f968e6dc93d371863bea95b2ffe67e12de0233bcd16cdef0bb31802caecd74b0bcf99d69071c08c1cc7657dbb8ffbbef2d793fb7922ff1285d993354c188f70b36a3ffa8d8ee6dc1ef1995ba1732199a3ec1aee695e53813b3147468037e8a4a8884ee9d3ed72e9916ac6f3539991ce7b9f3febad926698016d3fc9332d96127b7a649d28ebcc1eee2e4ab3acccedf9ea34deb4b4fe6ba614c320f20ccd5d08fcfe6c7a568f8443fd331fa8fe7bcf077cee905d60012b963cd9f4e62be1c000fe7c29b79bb66213516c2f596a34e766ac0876bd7229304602061cb0a3ee50eb878271af80e5affb2eb2596232f7a6be743855913932e91a1bff65b3f74929a1c100e781eced53f9c6c6f836408c1fc5bea7e337d17f02c2cf7b1e6b99612c0c223148feb769d61529bcfef79081c5b89e2c6e42c0fb30a4408aaa4746e7fd45ca08cac3ab2c6f1b3d3f01e82dc311c070d14628b02e27610cde48b44ac08a4bae69f1b40227fe04f812449e558bcfcb22fc614d33ce8c034cc8e94d43d317f959c0eba6eab166dcbc09630df6b93b7313f2e26fef97171321a386f73ae77e51b3e68350c2ac0714579169833f5e5bca4df61019d66d532ce485fe719402ca375335e54a0ba5ffaa529a8585623f862323601c3130fd3a2c58ac44d48242ffae69d6884616079699943d51d25655699c3b6afa123c9f2f6e0e650f04e81d13d3aeb410a8044e3c508c860af75dd17f9e49924ad0ad45248339eb6b7c2ecc141c57b7b76a8a75ebc177e7c04d0a55c5fc53b79a3e205e246ae3b79268cf9cd313cfdb8f04871ab941a726950262b48d64d8246fb077430b8b2b23bac9109d94a1670f4f0f55e7369b1fa63978b2b2a1b83bc195cedac016f9c810251f7b3cd6db9abcd301cef45aa8caa24694cd4f821ac0edcc54d9d9c3fcb64f3ebf267629eeed43ed6feed6633614cb0f387a6c71224dded4fcbf163d4245aed7f9bb17f2f4428cefe4075956e487ab79420b35c145c6931192dc623e01079253c8b30842019d980d452cfd0c285aa35fe1a1704ce9e3489b4d4481bdab6cb52f5e9fa36e669aa7e540a1c0d31c911e1dfd70b72480c24f0180b93fd4793a817c36d92dd26e0a6359d6870f6875ff5944d5a10632b024de653983bacbedc79498743b5b315d7ed5671b23c049531d3d19c550765b475c257cc8476024d5310cea8c5b8c664e75cfb64cadcb3cc242235a0b45206343595a37207e68ba06162e11d2e9debed3e974b05d28a0e530a6b717b59140f564f7f90f93fcffa89b3374f98d7cca955c239bb1678138e5013bb8375c824836aac0237c9d9e163770146d8f49f904b82f8c4f82d724ad2b25549a3d3d757ae325f0b3da23b2835c93bd60f8cd25232f2b16a239fc44433eea0a7a905a71ee7b55f48ff7fcdc44103ddbe19a9ad92fc1f0c066995df94b96053cc6486eaceb6dac6caab1cbbe04fdb7a29f9fa2004aee77c6a7890d26a8da3713c016ee666f4105de16a48ad3c13bb122443dc728a0b49c96ad148b312a54502b1976eed9a4f77cc878e7a3ba432e47c81c3201e2645a09fb7ccd710683c0b15b3c04385ddb1abfd0b0905391c25e66bdbd9f88c7693ccafb00b4c1a66a2a31ede67b1c28bfdb128b73b2d0ab5d1bd8f8491fd7527464b540770d86aeb6314fc1c8775c41fa2f6d80834c28ba8cb40024f67147fa16f99daa1f32c274d4b157264de631fcaabce3e1120e6da73ba6e34579a9b86a5c468de2c3b599180d2c274603f5c60cb73df008d30703d6183fe5394929b6c0abdd68a9d1efe6c33f7a3508db1a15075a421fcfa5635874268debb414bff376afefb0394c8eb91504f975631be1aae7d180a51ad83a557f54a9d1c96798c9e6b860de9ddb6bd187eff986547225ef47658a97e521fa590ceed5b1154a681682380b8214adb989748d6fcf65d619b2b906e51c490cfd76a0eafd0b42d772ed56303925133a9727630a485dcff283408efa196199603a488c6247f1d6865aa6776a0d59e7f29ed6a0e4a03916121e605dadbbc0dabd4f44f6d38b725cac54d2e8a848952d46dff9f3e75f06238ef1c6686d6a42f7e14fa13b3edac7753820c010bb7ea668916f271e9c7c4daa5d3f4af95fb14e86e267b288c0985f9c3f8172809213618bba4a884cbb196b9d6095bc0f0746ad8c167f8dfd0abf8e9288151319bf79ce5f527c87f5af5bd275e142356e69c5e0740360314c7198a6e66bd906ce06fc975744d48e98ae4ea44c59c20ab8521e655e95c83815a81dd567ff1d0f0f09565b0e8e8ff3a492f412875db91501ffe4682cc669678e6245025ef58829fd978ebbb3c21a142f8b1200cb59b5e94ca736174bc7b56af8aebb6a920dc9abf14396a01eadeb7b72d0b2630b4d75245b6ed6c5c2df964919df2c68554813f0c4a7b7b73da83e45c8c794e6ae60e4b2adf3682955cdaa71cc524e0cc3c307c92fa5286553aca2e60b5560c8adf054497febce0a1a1b720a742a656486ba3481bf6e1501c584791678ca006a28139bd37cb00f93f4d7e2f504f0bb4e521ea89fc2f8a4e0bcbee8f452ae51d5dc78ba11bdd6935ae05db023b39c82915c1f99ac81b4e7a8b4399c883e78a8eeaadc21e5ce0c06f57a6e58aa96d89377ed761082a695bab8374e7c9b779fdd16a082141459511925f071d6f41a227ea82737413fc4f1a01db4bb8f8e7c87d7b82e30906ffb7e4ca983ee278978d96cdb7854239ca1ad75c3f2a7993d5af2251fecc7ed01118bdb8bd20906e86a4891d7bd7364075c56f0eb738c690ad6899e924e6f0add07b9b3f0c43b2eef20c5c2d7be214e4ae2e7188b53ecf50d7c14a01dff471396c34906c1c58df52f485357374ef8a6dba38d45b5fca8e222ef14537b86952a823f7b2effcf04d96fea043c6d068ce6748bc5452cdac4d1d6ec6406eedd53e5110d2d3b9cd1fc6014232d75d71dfd48dadd3c7cfbfc4f74ceb03fea2cfe8b6a930c43036e8b1bec2548d6d8451e3c5eb277e16d82bfb4e69565b04420d883221f99fd3346deb6cc7996271e7faec5952dc3c31f78787cf9cc937604f499796cbf998ad2141124fcdc00052ebe1407476e76f805a3fe686cc027c78db9353a6edbfeb002d459badfaee568c79d1ef9c6ec1a67e6ea0a51fcab8b6e6b1925669875f730cf2db1ece3f76d1b8bfd87d698f864966577c2de4f5e6a42c69e31741a8ae228fe54431957edac378f321bb8f314da69e9257fa10968000ac65284c42cf24a8a53188592e20bf21b8ca8c39a95ef39e7226ca7fd4a92378eeaeacdeb3f9467e3ee9afa75469e293a60cab1d51d04c635828f4974e27b7983f613c77246c8c69b4687177e59f8e915a470e7230d1a011144c8f3042264ef59310068aa0fdb628775626a92b9fb96110e964f8122e5083eddf005b7ab2f27e80cfae868e75304671dffc62890bd69261761142315fe748133964dbdbd3b44b8f3d99a45ed157a8dfd700247130398bb4f7b2f45cd1561a9784a22d656473eb28f682f231e104d338dd75bd14616de0a16824076a65d67a75e73d9317b607f44d3ba2e28469466b13ff965fa57c827c71e3ef25500bc3867ece0fbdc56a2dfd1576bf9f8ca0490b5e5bb2e769963b091d283d5e8cb89493b65c694fe9db88590adcb17ce67ada8fde7e697c6dc7b580a56a91c0c26227b806f4287ef82b2b2d9486011d57be04ddcf7481d3ea42adec0cb451c7e5dfa560c5143300991391d4c912b0601b54c85201113cdcc741c692bc6478d5f1e8b90b7b450373c79965fad0fdbfa24a2301243dbaffc75dbce5c9dbf2ae83133b49f71631a4f4af750ed435305ec7ec6223177ffcea239d306022cfe0215f8f864f6e800ad34e8ec78c3dcec280e51655702a4f04700ff4fec7e5d222e3dc450d1d35cac065455ade99cd2feaffbbd363fe849bb6fa8c60d7b65ae02e7c17586bd8c7c552e61c2ba8f9fa57043796130ff6c4b4c46abdb8b3c1b977e6665c0e4d47c879fe01d2b2214c21bab07fa7e5ec2ca186917a388e60ad4118e3591b0b6dc341e65aac4e72546be2ea8882d2697184b79e4a25bdfcd3efa320b542914ea564a36f266f916a6a425a523400939609874a914e6e62205935499f554c5abf0ef23b79cb901186eab9b54169432cce3867f7f42aed57ddaa2c0c067c1b11739686594d31524dee1455242b186ad3f09fa5fe6088a889933e07691b43a38f998c7438630e2c2d49ec26f432d56bc25c45aec7c4a6b4ffee48299d2733ba921467d95e094f60eac1e67c48b481a8715275548f15c622ef503071fa44402d311bbaac11bd0092d5601522469879d3dbe8b014b89fc576574d6534adf20af99367692a8e4956f1cf222c9ee9b0f9d9973d122080a6efbb15341f01ed8adfb7e90cbc66a189c32591ee9554fa7dbbc5dd8452d8d6407cba51cbf4d1ddc6d9add2dd2cf70385ae08eb272ad0041ae055ce3298b0c2ff220ed828a574608390938d4b2b9d3ea6fb9d573da9b2402651d133d4999dd0bae348fed83c6b5e1fd229058ff6f16dec1da9e68308d7c192089973cf787356cecf053c8f9c0161d87cdf4fb295006a139488429d2412d07bcca4bee361df754aa0ebf36e0f7ee259aaab5dab15502a0cc71a7c985442fa9ae7d604b5158b16190816bda7a6b0583a6305bcac9b6d6bc0b9bad2645f05a62ba20819943fd22b0da7242f05c037f226b9d96261381e95c27214051fdaa3036f72ef10e9d8947a93b965e5cdea11710c93d61fa55b48ea400b3415f4cded31d78a9a8a4d0a40025883508669a5ef3429f9d21e495d199e282699e6fac4ef28e1fd6fc0e2d4f1abc7f06cc19ee8e448eb803d641b79602ac000f4c0f974c62e100337797a77cc23cf21332bb8ebebcb23806cdda098da842b6632ba53441e55e7a1a4937713ad90b812daa6b972abf876d599e818331ce37c3d606fa7d2f75396d81075583adf92b981f6a89bd26eb225c72763cdd69d5941dbb171dd27c5bf4b9cd77996120d4554fa1ef726c5604976b6f8499b3c6fd8486b5505d2fccbdb71a436f55b519ace", 0x1000}, {&(0x7f0000001e00)="4e106cc821eacf32a1a60878353939d56d1b2bb56ac8927c35a810ffe23c7772024d4877cb3629040477c2369dc9f3a427cc4a32c6f2b5042895faea5eb163fa844665", 0x43}, {&(0x7f0000001e80)="05bcb645f91cfe03ea58b09b8ceb87aefcd4bbce5e15b9639f7ee74b2e71e133db91d72a0d633a02b8bf8eed3dd29441c5187a773cfa06197b1628e0fb62510ec8ec4336e11955e7f4b321c10ce66886e95ef12f796e1b00e5b8fdaf2421e42e957482bf6e16323ec0fd01d08a77c6d9cc", 0x71}, {&(0x7f0000001f00)="c8f51b058b1689141b337ae329665ba1f678868d56d934524e139504f7fafcfd6aa6583c89d98aad4886e49275a2666f8880fa63fde0a2fffe86f3511029c7c20f923ea74da8e5a1d35ea35750f3e98b5cbcad627bace073233c43ee8e8d1603857ec2d6242c437d9a0e0f1473ef274bf93a0caa56f30b57904312b20c2eba19", 0x80}, {&(0x7f0000001f80)="a5e0b04bce7ca36d2af771b0c30265ab186c355fe44c0cf4d4791e50f5172429a627195e71d37e1141885f36f4edf3d82c78a49dc1ef32e15323eb7bafbe87f6f3689e8d78ffaedf2717e4bdd5c026", 0x4f}, {&(0x7f0000002000)="910af5ce2c39dba9523a4e77e471d8377a1cc6b04110625908a84e491796429acbb3c29e4d02e29e555757b01ade22aa829beab4d263471631bf45e1f3b61bfa4b0ffddb4a437d1aa3e0", 0x4a}, {&(0x7f0000002080)="911f3d19371571d49b94d8eed2bf6e432dcecb9d6d86370819791c18380c3da39914abf7fdc8eaf842fbdef20f7c08bc50b89826f57c68c64c236aee752e582447b3e1d5620b16f25aeca0debf9d87960a6b425a59abebed863a593f8f06c84d1ad0b7d9b9c8ab56c9f789db21bbfbe682489957141261edcd025ed158145bba46cc", 0x82}], 0x8, &(0x7f00000021c0)=[{0x90, 0x10d, 0x6, "953589273d46a4bdbd0747f3cf2f4f9e7af2e638bb680b5827623de65c51e9978f6ad8abc6a1942c4079b7bf1ed89e0dd2d770beff9e3f975f97336a75e75b31e816a8b138f00c3615d70663027b36c08217e1338080de74768065baeb1c97e2396fd9bd4814285f90a9fb3fe80c3232222c0b602c590b6a5ed9"}, {0x30, 0x10b, 0xfc, "7462041503f3efb7786cf251efb0cc02fbb9c887904f57f90a3f74248c72d0ca"}, {0xa8, 0x10e, 0x3, "d16ceb130a1fe2c467429cf17bcc078d7696c676da5a0612efc593f91b4877114353f227eccf4d525c0eba53a28de66a4d1957ab2bcaf27218d889c7836f63e08755a73daf64064a7829be0b34d4c03b2d6908f05c84511c1e4ad62f238390bf13cf983652ba94e5090182ff7a8543a9d282294b6e7539134065173602329ae35ee77b18f09806dd037c1d6b3644d46db723"}, {0x88, 0x184, 0x5, "6c6d09c4f93c2ef3da5e43071415d3a3caef253fedb0df843670b26f879c702c0c1c6669227afa5ac33d18fa379a08025ea4ac50a55e9c38b777a8f4df1608f9291cb14e2d9a358a832b2e919ff2926b58531079a26f72017ba62a28f6efb9e6fb2bfb5afea715f2e6a190acb62f9024c2c397d55ce4983b"}, {0xb8, 0x180, 0x0, "df0ff160ae24d766cc7926f260df30807ff910547416c2346ef7cb99438c2bb499207c9cba172b526ee31833398df908ef0e3f6bfb7276ab09be2995ccaa199b2a562af1e13ea71a1f6240110642d35e79895ce31319cc030aca4139f1fd181d2bf83e902a5186d4df624d767f92fe1a3963917275da332340c1fbb7f797a4ab1a81276d68373674b4fc94298bcc6ecc457cc27c202ccb2d2d0b9b3e9a7714a1495d3528"}, {0x18, 0x10c, 0x8, "2d9badd6fad6d99f"}, {0xe0, 0x107, 0x0, "1f5a2dd0233f0e00231450a8d0f60c9b0d62111fd006e1d9b8cb64be07553bea7fe7710b181877a4263b430ada471413adf0d90f3afb839c8484985d21f31d9236b35a4f1e00ae33b7aabba41d30f67ef6cfbfbe63aadda0ee5cc97dec6a1fa4a40b6be01ee0cc3b3f5ff1c334d51efd20843486bb9ddb92950ad493ff411a6f9eb58519c5028466719cb844de44bc5dee1d7d17c12f900428d9b6e29eedad2177d03587ad068be5dc9491c5a855dea073d336edf5319cfefe9e6d814a40ce2b844253edf7c6f7516d17f01e3b"}, {0x50, 0x117, 0x7, "7536fc0eaecf76404f6ec730f2593f0b9244419e70345a7388c57525c137797002f191be3eed75e4bf2a88ceef3787b5a531abe19c2f5e7bb8461da7488fad"}, {0xd0, 0x10d, 0x5b9e, "9bf60718a57b43433dc6ed5a0683e1372535de0d48b53d659e842d0de58ae112999f30ec2ae23495d96ac68616c96349471c5f81e444f12ea15b241095c15229bcfdee1990cc3b7f671049cd9bfb24c71a0bc8963d0706b51b77aeaad6b3c5ab7e607368f2ef6dcf4ed9c7234eb31165f4a42c2e260270ce6ae99c6ce07d2c3b98955c7d4fcc16c2cf6e2d1a8725a99e6f3bf9dca72ed551d40977c1f06ff00520840be116d2a70f4349bd3ac3ad4f5f6e72001097adbdc95523810ea5a39ab7"}], 0x4c0}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002740)="db4abf5d4ad6d47d339b8852866bc655a077470b59d2506711513c08ae48519dfea9225ac877a0e8a37940da78fddfb385de7e0361155a46dd4c0a779acc659e97118ec82313b4e415ba57de0f4a8f2fb47e", 0x52}, {&(0x7f00000027c0)="049542ce4593393203", 0x9}, {&(0x7f0000002800)="81738f7847b2b79c02b7a78a20b3e6eca258484074d28c14e83b3c688721b592590b95b5ba7d4ed390ba528f303ea6133d3ebe3203d948e14eca2e249e83e6eec02e1ae5f7004f1060ede0107a7e9dd21113285bd6eaca1fa0c4e9df6b2b9ee0d61938", 0x63}, {&(0x7f0000002880)="cdb880e17313398668448a6aab7b59cd6b62aa70d129fcf5762b8de1b31916b6a9d2e829b3e773c0dd7351e4d5e49dc8db8b0286b2119e8bbc64c947d33f165998e6f0ffa3a5", 0x46}, {&(0x7f0000002900)}], 0x5}}, {{0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f00000029c0)=[{0x78, 0x84, 0x81, "5552544a14cb66d5c0b5f0ecf814aefb965481bcba78f95c8cd6aa9a092834a9f39453cb60335fd03e5b2f7c4f700e5dc55229bf3d8bde89ff07792d4f12ae5b35c0921056a8ac96b420de38721dcc7bb917ae7fd3f73c0a2865f887605f070fda35e4e9cbb367"}], 0x78}}], 0x3, 0x10) syz_usb_disconnect(0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1f375, 0xd, '\x00', @p_u8=&(0x7f0000000440)=0x4}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 1.968315252s ago: executing program 4 (id=4221): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000580)}, {0x0}], 0x2) 1.784323462s ago: executing program 2 (id=4222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.74934409s ago: executing program 4 (id=4223): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x3, &(0x7f0000000400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, 0x0, 0x0]) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'pim6reg0\x00', @ifru_map={0x80000000, 0x80000001, 0x4, 0x12, 0xfe, 0x76}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000500)={0x50, 0x800, 0x1d, {0x1000, 0xcac}, {0x8000, 0x7}, @rumble={0x800, 0x67}}) write$eventfd(r1, &(0x7f0000001340), 0x8) 1.544215846s ago: executing program 2 (id=4224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) 1.432078154s ago: executing program 2 (id=4225): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b70795"], 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x400004cc6, 0x101183) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x108, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(r1, r0, 0x0) 1.399276462s ago: executing program 0 (id=4226): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x18}) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x1, 0x1, 0x7, 0x2, 0x0, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.322720207s ago: executing program 1 (id=4227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket(0xa, 0x3, 0x87) sendto(r4, 0x0, 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000000002202000000000070000000008000300", @ANYRES32=r6, @ANYBLOB="08000100ac1414bb"], 0x2c}}, 0xea5bc50b6199d77e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000048002103", @ANYRES32=0x0, @ANYBLOB="04000000080002000600000014001a00ff01000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3, 0x68002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) 281.373501ms ago: executing program 1 (id=4228): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x84, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}]}, 0x84}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x5d, 0x35, 'dummy0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0xfff8}}}}}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000002c0)) r6 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, 0x0, r7, r8, 0x0, &(0x7f0000000480)) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 244.045588ms ago: executing program 0 (id=4229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'A'}]}], {0x14}}, 0x5c}}, 0x0) 109.900652ms ago: executing program 1 (id=4230): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x3, &(0x7f0000000400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, 0x0, 0x0]) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'pim6reg0\x00', @ifru_map={0x80000000, 0x80000001, 0x4, 0x12, 0xfe, 0x76}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000500)={0x50, 0x800, 0x1d, {0x1000, 0xcac}, {0x8000, 0x7}, @rumble={0x800, 0x67}}) write$eventfd(r1, &(0x7f0000001340), 0x8) 51.86984ms ago: executing program 4 (id=4231): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b70795"], 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x400004cc6, 0x101183) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x108, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 10.212058ms ago: executing program 5 (id=4232): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)}}], 0x2, 0x4000080) sendto$inet6(r0, &(0x7f00000005c0)="fc", 0x1, 0x8001, 0x0, 0x0) 0s ago: executing program 0 (id=4233): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x20000804) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) kernel console output (not intermixed with test programs): it's busy [ 1019.338486][T16874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.378652][ T5611] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1019.384213][T16876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.384913][T16876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.480978][T16878] tipc: Started in network mode [ 1019.480993][T16878] tipc: Node identity 2003, cluster identity 4711 [ 1019.481001][T16878] tipc: Node number set to 8195 [ 1019.528157][ T5611] usb 1-1: Using ep0 maxpacket: 32 [ 1019.530002][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1019.530034][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1019.530045][ T5611] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1019.532100][ T5611] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1019.532130][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.532146][ T5611] usb 1-1: Product: syz [ 1019.532153][ T5611] usb 1-1: Manufacturer: syz [ 1019.532161][ T5611] usb 1-1: SerialNumber: syz [ 1019.609156][ T5611] usb 1-1: config 0 descriptor?? [ 1019.825770][T16884] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1019.825799][T16884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1019.828423][T16884] vhci_hcd vhci_hcd.0: Device attached [ 1019.867900][T16888] vhci_hcd: connection closed [ 1019.868476][ T6630] vhci_hcd vhci_hcd.4: stop threads [ 1019.868497][ T6630] vhci_hcd vhci_hcd.4: release socket [ 1019.868531][ T6630] vhci_hcd vhci_hcd.4: disconnect device [ 1019.969779][T16892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.972122][T16892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.317016][ T5611] usb 1-1: USB disconnect, device number 88 [ 1020.715576][ T5611] hid_parser_main: 7 callbacks suppressed [ 1020.717977][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.718946][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.718984][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.719009][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.719033][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.719058][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.719082][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.719106][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.719130][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.719154][ T5611] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 1020.796807][T16908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.797415][T16908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.823429][ T5611] hid-generic 0006:0008:0001.0027: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1021.092853][T16909] fido_id[16909]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1021.623105][T16921] JFS: charset not found [ 1021.625960][T16926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.626430][T16926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.922238][T16923] tipc: Started in network mode [ 1021.922260][T16923] tipc: Node identity 2003, cluster identity 4711 [ 1021.922274][T16923] tipc: Node number set to 8195 [ 1022.963226][T16944] pimreg: entered allmulticast mode [ 1023.052837][T16943] pimreg: left allmulticast mode [ 1023.548237][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1023.878299][T16963] JFS: charset not found [ 1024.110812][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1024.110839][T16967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1024.113229][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1024.113252][T16967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1024.172989][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.173373][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.259713][T16970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.266942][T16970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.332088][T16972] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1025.616997][T16992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.619590][T16992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.094096][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1026.094119][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1026.094352][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1026.094367][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1026.121984][T17005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.122577][T17005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.556542][T17043] JFS: charset not found [ 1027.624777][T17028] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1027.624963][T17028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1027.625062][T17028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1027.704480][T17028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1027.704752][T17028] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1027.958801][T12785] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1028.108154][T12785] usb 5-1: Using ep0 maxpacket: 32 [ 1028.132699][T12785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1028.147089][T12785] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.166420][T12785] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1028.166450][T12785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.166469][T12785] usb 5-1: Product: syz [ 1028.166482][T12785] usb 5-1: Manufacturer: syz [ 1028.166495][T12785] usb 5-1: SerialNumber: syz [ 1028.273859][ T5331] hid_parser_main: 7 callbacks suppressed [ 1028.273876][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.273905][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.275152][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.275182][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.275208][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.275232][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.275257][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.275280][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.275311][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.275335][ T5331] hid-generic 0006:0008:0001.0028: unknown main item tag 0x0 [ 1028.402719][ T5331] hid-generic 0006:0008:0001.0028: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1028.547480][T12785] usb 5-1: Cannot retrieve CPort count: -71 [ 1028.547527][T12785] usb 5-1: Cannot retrieve CPort count: -71 [ 1028.547562][T12785] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 1028.594116][T12785] usb 5-1: USB disconnect, device number 90 [ 1028.762532][T17056] fido_id[17056]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1029.068131][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1029.181929][T12784] hid-generic 0006:0008:0001.0029: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1029.186211][T17065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.210984][T17065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.508219][T17067] fido_id[17067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1029.708610][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1029.708650][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 1029.708678][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1029.708746][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1030.308401][T17088] tipc: Started in network mode [ 1030.308417][T17088] tipc: Node identity 2003, cluster identity 4711 [ 1030.308425][T17088] tipc: Node number set to 8195 [ 1030.539852][T17074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1030.540078][T17074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1030.540258][T17074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1030.550162][T17074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1030.550406][T17074] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1030.553584][T17097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.554191][T17097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.711733][T17101] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1030.711762][T17101] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1031.869742][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1032.163701][T17123] JFS: charset not found [ 1032.213440][T17126] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1032.538857][T17116] input: syz0 as /devices/virtual/input/input23 [ 1032.588202][T10240] Bluetooth: hci5: command 0x0406 tx timeout [ 1032.588242][T10240] Bluetooth: hci0: command 0x0406 tx timeout [ 1032.588271][T10240] Bluetooth: hci2: command 0x0406 tx timeout [ 1032.588354][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 1032.638179][ T5715] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1032.803894][ T5715] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1032.803927][ T5715] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.803969][ T5715] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1032.803991][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.070967][ T5715] usb 5-1: usb_control_msg returned -32 [ 1033.071017][ T5715] usbtmc 5-1:16.0: can't read capabilities [ 1033.276721][ T5715] usb 5-1: USB disconnect, device number 91 [ 1033.622000][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 1033.997144][T17146] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3628'. [ 1034.066426][T17137] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1034.066754][T17137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1034.067017][T17137] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1034.067272][T17137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1034.069022][T17137] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1034.123764][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'. [ 1034.123787][T17155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3631'. [ 1034.124015][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'. [ 1034.124031][T17155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3631'. [ 1034.126949][T17155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.143048][T17155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.211240][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1034.211262][T17157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1034.211482][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1034.211497][T17157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1034.213945][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.214781][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.321897][T12784] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1034.500175][T12784] usb 5-1: Using ep0 maxpacket: 32 [ 1034.502586][T12784] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1034.503893][T12784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.503916][T12784] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1034.507420][T12784] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1034.507448][T12784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.507469][T12784] usb 5-1: Product: syz [ 1034.507483][T12784] usb 5-1: Manufacturer: syz [ 1034.507498][T12784] usb 5-1: SerialNumber: syz [ 1034.833805][T12784] usb 5-1: unit 4 not found! [ 1034.833827][T12784] usb 5-1: unit 255 not found! [ 1035.479335][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.010562][T12784] usb 5-1: USB disconnect, device number 92 [ 1036.118188][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1036.118234][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 1036.118259][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1036.118325][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1036.312474][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.477655][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.491092][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.265657][T17197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1038.267555][T17197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1038.268503][T17197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1038.272997][T17197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1038.273270][T17197] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1038.395062][T17213] pimreg: entered allmulticast mode [ 1038.415014][T17212] pimreg: left allmulticast mode [ 1039.440606][ T5715] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1039.598164][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 1039.600489][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1039.600522][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1039.600545][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1039.600570][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1039.600595][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1039.603872][ T5715] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1039.603902][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.603920][ T5715] usb 5-1: Product: syz [ 1039.603934][ T5715] usb 5-1: Manufacturer: syz [ 1039.603947][ T5715] usb 5-1: SerialNumber: syz [ 1039.605843][T17224] binder: 17223:17224 ioctl c0306201 0 returned -14 [ 1039.722503][ T5715] usb 5-1: config 0 descriptor?? [ 1039.747055][ T5715] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 1039.788149][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1039.910780][T17229] pimreg: entered allmulticast mode [ 1039.917793][T17228] pimreg: left allmulticast mode [ 1040.198365][ T5715] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1040.268207][T10240] Bluetooth: hci0: command 0x0406 tx timeout [ 1040.268299][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 1040.358599][T10240] Bluetooth: hci2: command 0x0406 tx timeout [ 1040.358638][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1040.630455][ T66] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1040.688304][ T5715] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1040.764182][T17240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1040.765556][T17240] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1040.765837][T17240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1040.766101][T17240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1040.766333][T17240] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1040.961913][ T5715] usb 5-1: USB disconnect, device number 93 [ 1041.631615][T17286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.632194][T17286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.710775][ T66] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1041.711060][ T66] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1041.838221][ T5715] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1041.990032][ T5715] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1041.990051][ T5715] usb 5-1: config 220 has 0 interfaces, different from the descriptor's value: 184 [ 1041.990072][ T5715] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1041.990084][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.998448][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1042.271128][ T5331] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1042.407459][ T31] usb 5-1: USB disconnect, device number 94 [ 1042.566766][T17290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1042.566922][T17290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1042.567102][T17290] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1042.569400][T17290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1042.569648][T17290] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1042.574088][T17307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.580488][T17307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.588414][T12785] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1042.771009][T12785] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1042.778251][ T5715] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1043.256006][T17317] __nla_validate_parse: 2 callbacks suppressed [ 1043.256025][T17317] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3682'. [ 1043.413768][T17319] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3684'. [ 1043.414351][T17319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1043.950483][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1043.970664][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 1044.122688][T17342] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3694'. [ 1044.245072][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1044.588731][T10240] Bluetooth: hci0: command 0x0406 tx timeout [ 1044.588772][T10240] Bluetooth: hci2: command 0x0406 tx timeout [ 1044.588795][T10240] Bluetooth: hci4: command 0x0406 tx timeout [ 1044.588840][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1044.797419][T17339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1044.797566][T17339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1044.797792][T17339] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1044.797923][T17339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1044.799752][T17339] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1045.068745][ T5715] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1045.220106][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.222639][ T5715] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1045.222668][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.222688][ T5715] usb 1-1: Product: syz [ 1045.222702][ T5715] usb 1-1: Manufacturer: syz [ 1045.222716][ T5715] usb 1-1: SerialNumber: syz [ 1045.290073][ T5715] usb 1-1: config 0 descriptor?? [ 1045.308277][ C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 1045.308293][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1045.346624][ T5715] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1045.478197][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1045.703445][ T5715] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1045.703506][ T5715] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1045.727960][ T5715] usb 1-1: USB disconnect, device number 89 [ 1046.268110][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.828289][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 1046.835997][T10240] Bluetooth: hci2: command 0x0406 tx timeout [ 1046.836712][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1047.292942][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 1047.364161][ T5715] hid_parser_main: 24 callbacks suppressed [ 1047.364181][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364204][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364224][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364245][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364265][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364286][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364306][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364326][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364347][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.364376][ T5715] hid-generic 0006:0008:0001.002A: unknown main item tag 0x0 [ 1047.378664][ T5715] hid-generic 0006:0008:0001.002A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1047.671025][T17391] fido_id[17391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1047.701575][T17386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1047.701796][T17386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1047.702257][T17386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1047.702430][T17386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1047.702615][T17386] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1047.938088][ T31] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1048.001627][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'. [ 1048.118134][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1048.120522][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1048.123944][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.123968][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1048.127047][ T31] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1048.127075][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.127094][ T31] usb 1-1: Product: syz [ 1048.127108][ T31] usb 1-1: Manufacturer: syz [ 1048.127121][ T31] usb 1-1: SerialNumber: syz [ 1048.258674][T17415] pimreg: entered allmulticast mode [ 1048.288236][T17414] pimreg: left allmulticast mode [ 1048.419558][T17413] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3716'. [ 1048.588211][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1048.720727][ T31] usb 1-1: unit 4 not found! [ 1048.720756][ T31] usb 1-1: unit 255 not found! [ 1048.818527][ T31] usb 1-1: USB disconnect, device number 90 [ 1048.880099][T17426] veth0_virt_wifi: left promiscuous mode [ 1048.887016][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.048990][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1049.354142][ T56] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1049.354814][ T56] bond3: (slave veth5): making interface the new active one [ 1049.565473][ T56] bond3: active interface up! [ 1049.630527][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1049.710050][T10240] Bluetooth: hci5: command 0x0406 tx timeout [ 1049.710091][T10240] Bluetooth: hci2: command 0x0406 tx timeout [ 1049.710117][T10240] Bluetooth: hci0: command 0x0406 tx timeout [ 1049.710189][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 1049.761708][T17454] JFS: charset not found [ 1049.791588][T12785] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1050.438280][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1051.881084][T17472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1051.885732][T17472] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1051.886031][T17472] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1051.886800][T17472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1051.887871][T17472] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1052.075836][T17495] input: syz0 as /devices/virtual/input/input25 [ 1052.205811][T17507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1052.216117][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1052.216140][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1052.216372][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1052.216386][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1052.226479][T17501] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1052.231844][T17507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.232469][T17507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.998476][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1053.023176][T17513] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3747'. [ 1053.143027][T17515] netlink: 'syz.2.3748': attribute type 12 has an invalid length. [ 1053.143047][T17515] netlink: 'syz.2.3748': attribute type 29 has an invalid length. [ 1053.143060][T17515] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3748'. [ 1053.228196][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1053.311423][T17522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.311899][T17522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.948241][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1053.948285][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1053.948314][T10240] Bluetooth: hci4: command 0x0406 tx timeout [ 1053.948326][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1054.304923][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1054.330120][T17528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1054.330361][T17528] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1054.330533][T17528] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1054.330678][T17528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1054.330784][T17528] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1054.552355][T17548] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3760'. [ 1054.751729][T17551] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1054.778810][ T6199] hid_parser_main: 7 callbacks suppressed [ 1054.778833][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.778862][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.778886][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.778910][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.778932][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.778956][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.778981][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.779002][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.779025][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.779048][ T6199] hid-generic 0006:0008:0001.002B: unknown main item tag 0x0 [ 1054.884066][ T6199] hid-generic 0006:0008:0001.002B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1054.908718][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1054.965574][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.966195][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.038266][ T31] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1055.208479][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1055.211065][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1055.219039][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.219064][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.252735][ T31] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1055.252786][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.252805][ T31] usb 1-1: Product: syz [ 1055.252819][ T31] usb 1-1: Manufacturer: syz [ 1055.252833][ T31] usb 1-1: SerialNumber: syz [ 1055.369686][T17569] input: syz0 as /devices/virtual/input/input26 [ 1055.571071][ T31] usb 1-1: unit 4 not found! [ 1055.571096][ T31] usb 1-1: unit 255 not found! [ 1055.628070][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1055.720005][ T31] usb 1-1: USB disconnect, device number 91 [ 1055.851123][ T9609] udevd[9609]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1056.348128][T10240] Bluetooth: hci5: command 0x0406 tx timeout [ 1056.348168][T10240] Bluetooth: hci2: command 0x0406 tx timeout [ 1056.348194][T10240] Bluetooth: hci4: command 0x0406 tx timeout [ 1056.348261][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 1056.744061][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.744386][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.468422][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1058.552713][T17638] input: syz0 as /devices/virtual/input/input27 [ 1058.640704][T17640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.642321][T17640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.790576][ T37] audit: type=1326 audit(1783540338.817:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17597 comm="syz.5.3774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17af3de59 code=0x7fc00000 [ 1060.672891][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.672960][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.815051][T17677] input: syz0 as /devices/virtual/input/input28 [ 1060.943657][T17680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.958960][T17680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.998897][T17678] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1061.303977][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3805'. [ 1061.368799][T17687] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3805'. [ 1061.978101][ T31] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1062.138213][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1062.143791][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1062.144907][ T31] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1062.155174][ T31] usb 5-1: string descriptor 0 read error: -22 [ 1062.155266][ T31] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1062.155288][ T31] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1062.208478][ T31] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1062.393949][T17720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.394521][T17720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.636004][T17725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.636694][T17725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.645136][ T31] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1062.646011][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1062.646099][ T31] usb 5-1: media controller created [ 1062.771079][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1063.112759][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 1063.133106][T17736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.133671][T17736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.260616][ T31] usb 5-1: USB disconnect, device number 95 [ 1064.472419][T15496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1064.513772][T15496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1064.552651][T15496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1064.562110][T15496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1064.587009][T15496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1064.588496][ T5908] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1064.751933][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1064.753457][ T5908] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.765823][ T5908] usb 5-1: string descriptor 0 read error: -22 [ 1064.766014][ T5908] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1064.766039][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.029777][ T5908] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1065.572481][ T5908] usb 5-1: USB disconnect, device number 96 [ 1065.955457][T12784] hid_parser_main: 7 callbacks suppressed [ 1065.955472][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955490][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955505][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955520][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955536][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955551][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955576][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955590][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955604][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.955618][T12784] hid-generic 0006:0008:0001.002C: unknown main item tag 0x0 [ 1065.979404][T12784] hid-generic 0006:0008:0001.002C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1066.178332][ T5331] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1066.328054][ T5331] usb 1-1: Using ep0 maxpacket: 32 [ 1066.332617][ T5331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1066.334359][ T5331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.334381][ T5331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1066.372177][ T5331] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1066.372207][ T5331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.372227][ T5331] usb 1-1: Product: syz [ 1066.372241][ T5331] usb 1-1: Manufacturer: syz [ 1066.372255][ T5331] usb 1-1: SerialNumber: syz [ 1066.661668][ T6199] usb 3-1: USB disconnect, device number 63 [ 1066.748129][ T5617] Bluetooth: hci3: command tx timeout [ 1066.780636][ T5331] usb 1-1: unit 4 not found! [ 1066.780658][ T5331] usb 1-1: unit 255 not found! [ 1066.883292][ T5331] usb 1-1: USB disconnect, device number 92 [ 1067.067790][ T9609] udevd[9609]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.068256][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1067.567241][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.959825][T17812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.960668][T17812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.303206][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.755051][ T5331] hid-generic 0006:0008:0001.002D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1068.831379][ T5617] Bluetooth: hci3: command tx timeout [ 1068.982777][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.039569][T17829] fido_id[17829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1069.273063][T17833] pimreg: entered allmulticast mode [ 1069.324305][T17830] pimreg: left allmulticast mode [ 1069.628980][ T5331] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1069.905349][ T5331] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1070.150801][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.759147][ T5715] hid-generic 0006:0008:0001.002E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1070.908220][ T5617] Bluetooth: hci3: command tx timeout [ 1071.021016][T17756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.021839][T17756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.022060][T17756] bridge_slave_0: entered allmulticast mode [ 1071.043290][T17756] bridge_slave_0: entered promiscuous mode [ 1071.101057][ T5908] hid_parser_main: 41 callbacks suppressed [ 1071.101078][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.101103][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.101123][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.101155][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.106710][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.106737][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.106757][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.106775][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.106794][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.106812][ T5908] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0 [ 1071.123303][ T5908] hid-generic 0006:0008:0001.002F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1071.215204][T17871] fido_id[17871]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1071.292944][T17756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.293058][T17756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.293289][T17756] bridge_slave_1: entered allmulticast mode [ 1071.320365][T17756] bridge_slave_1: entered promiscuous mode [ 1071.426291][T17880] fido_id[17880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1072.213668][T17756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.993684][ T5617] Bluetooth: hci3: command tx timeout [ 1073.209191][T17756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.846000][T17756] team0: Port device team_slave_0 added [ 1073.873045][T17756] team0: Port device team_slave_1 added [ 1073.988474][T17756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.988492][T17756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.988517][T17756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.148532][ T66] bridge_slave_1: left allmulticast mode [ 1074.148565][ T66] bridge_slave_1: left promiscuous mode [ 1074.148809][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.161632][T17914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1074.166873][T17914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1074.168843][T17914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1074.169993][T17914] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1074.171093][T17914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1074.172072][T17914] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1074.361174][T17914] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1074.401046][ T66] bridge_slave_0: left allmulticast mode [ 1074.401080][ T66] bridge_slave_0: left promiscuous mode [ 1074.401312][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.163551][T17955] JFS: charset not found [ 1075.388188][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1075.628601][T15496] Bluetooth: hci1: command 0x0406 tx timeout [ 1076.194541][T15496] Bluetooth: hci3: command 0x0c1a tx timeout [ 1076.195224][T15496] Bluetooth: hci5: command 0x0406 tx timeout [ 1076.195256][T15496] Bluetooth: hci2: command 0x0406 tx timeout [ 1076.195283][T15496] Bluetooth: hci0: command 0x0406 tx timeout [ 1078.268186][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 1079.049213][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.109754][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.130086][ T66] bond0 (unregistering): Released all slaves [ 1079.168807][ T66] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1079.190659][ T66] bond1 (unregistering): Released all slaves [ 1079.205049][ T66] bond2 (unregistering): Released all slaves [ 1079.252004][ T66] bond3 (unregistering): (slave veth5): Releasing active interface [ 1079.291368][ T66] bond3 (unregistering): Released all slaves [ 1079.329370][T17756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.329384][T17756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.329404][T17756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.332149][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1079.502324][T17947] veth0_virt_wifi: left promiscuous mode [ 1079.780252][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.839815][T17976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1079.840134][T17976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1079.840288][T17976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1079.840384][T17976] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1079.840479][T17976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1080.023895][T17991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.026954][T17991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.108326][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1080.131060][ T66] tipc: Left network mode [ 1080.208321][ T6199] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1080.335378][T17998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.335872][T17998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.358111][ T6199] usb 1-1: Using ep0 maxpacket: 8 [ 1080.360304][ T6199] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1080.361372][ T6199] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1080.364217][ T6199] usb 1-1: string descriptor 0 read error: -22 [ 1080.364295][ T6199] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1080.364315][ T6199] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1080.391457][T17756] hsr_slave_0: entered promiscuous mode [ 1080.393778][T17756] hsr_slave_1: entered promiscuous mode [ 1080.564419][ T6199] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1080.580483][ T6199] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1080.580838][ T6199] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1080.581227][ T6199] usb 1-1: media controller created [ 1080.649657][ T6199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1080.716698][T17987] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1081.407840][T18015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1081.413088][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1081.413111][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1081.413358][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1081.413373][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1081.442104][T18015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.446387][T18015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.815560][T17987] usb 1-1: dvb_usb_au6610: wlen=4100, aborting [ 1081.815669][ T6199] zl10353_read_register: readreg error (reg=127, ret==0) [ 1081.868163][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 1081.868204][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 1081.868231][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1081.868257][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 1081.868282][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1081.994948][ T6199] usb 1-1: USB disconnect, device number 93 [ 1082.535576][T14590] hid_parser_main: 7 callbacks suppressed [ 1082.535595][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535620][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535639][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535659][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535679][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535699][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535719][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535739][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535759][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.535778][T14590] hid-generic 0006:0008:0001.0030: unknown main item tag 0x0 [ 1082.762305][T14590] hid-generic 0006:0008:0001.0030: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1082.767828][ T56] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1082.888175][T10660] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1083.038078][T10660] usb 5-1: Using ep0 maxpacket: 32 [ 1083.040839][T10660] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1083.042185][T10660] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.042208][T10660] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.044802][ T66] hsr_slave_0: left promiscuous mode [ 1083.045059][T10660] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1083.045085][T10660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.045106][T10660] usb 5-1: Product: syz [ 1083.045120][T10660] usb 5-1: Manufacturer: syz [ 1083.045134][T10660] usb 5-1: SerialNumber: syz [ 1083.270584][ T66] hsr_slave_1: left promiscuous mode [ 1083.271416][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.271466][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.373779][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.373808][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.905194][ T66] veth1_macvtap: left promiscuous mode [ 1083.905388][ T66] veth0_macvtap: left promiscuous mode [ 1083.942225][ T66] veth1_vlan: left promiscuous mode [ 1083.956574][ T66] veth0_vlan: left promiscuous mode [ 1084.312384][T18063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.313717][T18063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.358199][ T31] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1084.508087][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 1084.512177][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1084.514971][ T31] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1084.544427][ T31] usb 1-1: string descriptor 0 read error: -22 [ 1084.544521][ T31] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1084.544546][ T31] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1084.598866][ T31] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1084.634132][ T31] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1084.634508][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1084.634556][ T31] usb 1-1: media controller created [ 1084.682933][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1085.714554][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 1085.714710][T18073] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1085.716115][T18086] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1085.716240][T18073] usb 1-1: dvb_usb_au6610: wlen=4100, aborting [ 1085.716424][T18086] usb 1-1: dvb_usb_au6610: wlen=4100, aborting [ 1086.371526][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1086.429024][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1086.660647][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1086.709406][T18066] tipc: Enabled bearer , priority 0 [ 1086.711642][T18067] syzkaller0: entered promiscuous mode [ 1086.711668][T18067] syzkaller0: entered allmulticast mode [ 1086.798161][T10660] usb 5-1: unit 4 not found! [ 1086.798175][T10660] usb 5-1: unit 255 not found! [ 1086.965966][ T5715] usb 1-1: USB disconnect, device number 94 [ 1086.983814][T10660] usb 5-1: USB disconnect, device number 97 [ 1087.131457][T17996] udevd[17996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.264530][T18078] tipc: Resetting bearer [ 1087.632094][T18078] tipc: Disabling bearer [ 1088.390500][T18110] tipc: Started in network mode [ 1088.390523][T18110] tipc: Node identity 2003, cluster identity 4711 [ 1088.390534][T18110] tipc: Node number set to 8195 [ 1088.539172][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3926'. [ 1088.701630][T18128] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3926'. [ 1088.772821][T18100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1088.775827][T18100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1088.776009][T18100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1088.776178][T18100] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1088.776346][T18100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1089.614948][ T66] IPVS: stop unused estimator thread 0... [ 1089.722994][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'. [ 1090.111790][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 1090.548169][T10660] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1090.698297][T10660] usb 5-1: Using ep0 maxpacket: 8 [ 1090.700535][T10660] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1090.701658][T10660] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1090.704655][T10660] usb 5-1: string descriptor 0 read error: -22 [ 1090.704748][T10660] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1090.704772][T10660] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1090.802505][T10660] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1090.828311][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 1090.828346][T15496] Bluetooth: hci0: command 0x0406 tx timeout [ 1090.828388][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 1090.830886][T10660] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1090.831235][T10660] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1090.831281][T10660] usb 5-1: media controller created [ 1090.838110][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 1090.933894][T10660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1091.053464][T18164] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 1091.053544][T18164] usb 5-1: dvb_usb_au6610: wlen=4100, aborting [ 1091.291661][T18168] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1091.291886][T18168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1091.292074][T18168] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1091.292245][T18168] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1091.292414][T18168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1091.481041][T10660] zl10353_read_register: readreg error (reg=127, ret==0) [ 1091.541470][ T5331] hid_parser_main: 7 callbacks suppressed [ 1091.541491][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541528][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541551][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541575][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541599][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541623][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541647][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541670][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541694][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.541717][ T5331] hid-generic 0006:0008:0001.0031: unknown main item tag 0x0 [ 1091.591175][ T5331] hid-generic 0006:0008:0001.0031: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1091.781073][T10660] usb 5-1: USB disconnect, device number 98 [ 1091.791163][ T5715] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1091.823641][T18199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.824534][T18199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.942879][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 1091.957464][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1091.966411][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.966428][ T5715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1091.979786][ T5715] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1091.979816][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.979834][ T5715] usb 1-1: Product: syz [ 1091.979847][ T5715] usb 1-1: Manufacturer: syz [ 1091.979860][ T5715] usb 1-1: SerialNumber: syz [ 1092.229702][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1092.230000][T18207] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1092.951540][T18203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1092.980524][T18203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1092.980806][T18203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1092.981086][T18203] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1092.981329][T18203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1093.039972][ T5715] usb 1-1: unit 4 not found! [ 1093.039995][ T5715] usb 1-1: unit 255 not found! [ 1093.442155][ T5715] usb 1-1: USB disconnect, device number 95 [ 1093.452462][T17756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1093.464510][T17992] udevd[17992]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1093.464660][T17992] udevd[17992]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1093.498483][T17996] udevd[17996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.535682][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1093.536707][T17756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1093.633993][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.650121][T17756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1093.680342][T18240] input: syz0 as /devices/virtual/input/input29 [ 1093.711634][T18242] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1093.892329][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.897743][T17756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1094.228366][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.270255][T15496] Bluetooth: hci1: command 0x0406 tx timeout [ 1094.492113][T18261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3952'. [ 1094.678589][ T5715] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1094.950028][ T5715] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1094.950070][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.950120][ T5715] usb 1-1: Product: syz [ 1094.950185][ T5715] usb 1-1: Manufacturer: syz [ 1094.950233][ T5715] usb 1-1: SerialNumber: syz [ 1094.988209][T15496] Bluetooth: hci3: command 0x0c1a tx timeout [ 1094.988249][T15496] Bluetooth: hci5: command 0x0406 tx timeout [ 1094.988276][T15496] Bluetooth: hci2: command 0x0406 tx timeout [ 1094.988300][T15496] Bluetooth: hci0: command 0x0406 tx timeout [ 1097.551239][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3953'. [ 1097.710174][T18269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1097.710201][T18269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1097.710291][T18269] vhci_hcd vhci_hcd.0: Device attached [ 1097.801351][T18275] vhci_hcd: connection closed [ 1097.805444][ T3340] vhci_hcd vhci_hcd.4: stop threads [ 1097.805469][ T3340] vhci_hcd vhci_hcd.4: release socket [ 1097.805504][ T3340] vhci_hcd vhci_hcd.4: disconnect device [ 1097.805745][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1097.806960][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1097.854520][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1097.854567][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1097.903011][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1097.920429][T17756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.959577][ T5715] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1097.985232][ T5715] usb 1-1: USB disconnect, device number 96 [ 1098.092452][T17756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.157364][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.157489][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.176477][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.176690][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.920053][T18285] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1098.920274][T18285] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1098.920454][T18285] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1098.920636][T18285] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1098.920831][T18285] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1099.871711][T17756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.073777][T17756] veth0_vlan: entered promiscuous mode [ 1100.203714][T17756] veth1_vlan: entered promiscuous mode [ 1100.358999][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1100.442373][T17756] veth0_macvtap: entered promiscuous mode [ 1100.459464][T17756] veth1_macvtap: entered promiscuous mode [ 1100.500335][T17756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.552887][T17756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.582330][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.583499][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.583558][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.583590][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.990031][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 1100.990068][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 1100.990089][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1100.990111][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1101.580836][T18338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.581378][T18338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.924760][ T3318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.924781][ T3318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.123326][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.123345][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.180882][ T31] hid_parser_main: 7 callbacks suppressed [ 1103.180907][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.182846][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.182876][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.182901][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.182925][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.182949][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.182973][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.182997][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.183020][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.183044][ T31] hid-generic 0006:0008:0001.0032: unknown main item tag 0x0 [ 1103.230421][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1103.321075][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1103.343284][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1103.356746][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1103.359961][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1103.603341][ T31] hid-generic 0006:0008:0001.0032: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1103.764589][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.765188][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.879416][T18365] fido_id[18365]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1104.145154][T18379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.146079][T18379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.428383][T18383] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3979'. [ 1104.460984][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3979'. [ 1104.461852][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3980'. [ 1104.461874][T18382] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1105.046162][T18398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.046728][T18398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.060614][T18398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.061144][T18398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.078263][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1105.180018][T18401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.185003][T18401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.185466][ T5908] hid-generic 0006:0008:0001.0033: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1105.248143][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1105.250787][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1105.251998][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1105.256496][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1105.256581][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1105.256603][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1105.313098][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1105.370270][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1105.374198][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1105.374254][ T9] usb 1-1: media controller created [ 1105.446605][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1105.640202][T15496] Bluetooth: hci4: command tx timeout [ 1105.675511][ T3384] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.519051][T18393] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1106.519120][T18393] usb 1-1: dvb_usb_au6610: wlen=4100, aborting [ 1106.522641][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1106.605617][ T3384] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.662108][ T9] usb 1-1: USB disconnect, device number 97 [ 1107.258640][T18427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1107.269585][T18427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1107.269868][T18427] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1107.270113][T18427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1107.270357][T18427] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1107.270473][T18427] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1107.434090][T18427] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1107.781766][ T37] audit: type=1326 audit(1783540386.867:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18449 comm="syz.0.4001" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb5cdfde59 code=0x0 [ 1108.102843][ T3384] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.227531][T18454] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3999'. [ 1108.253251][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3999'. [ 1108.287030][ T9] hid_parser_main: 24 callbacks suppressed [ 1108.287051][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287075][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287094][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287113][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287133][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287151][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287169][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287188][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287208][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.287231][ T9] hid-generic 0006:0008:0001.0034: unknown main item tag 0x0 [ 1108.313585][T18466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.314236][T18466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.456043][ T9] hid-generic 0006:0008:0001.0034: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1108.591948][T18473] fido_id[18473]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1108.758157][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1108.883771][ T3384] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.904543][T18477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.908642][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1108.912004][T18477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.928038][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1108.942971][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1108.957694][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1108.957766][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1108.957780][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1108.983204][ T199] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1108.988254][T15496] Bluetooth: hci1: command 0x0406 tx timeout [ 1109.034306][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1109.093745][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1109.094193][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1109.094239][ T9] usb 3-1: media controller created [ 1109.112142][T18357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.112350][T18357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.112539][T18357] bridge_slave_0: entered allmulticast mode [ 1109.122300][T18357] bridge_slave_0: entered promiscuous mode [ 1109.126242][T18357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.126353][T18357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.126515][T18357] bridge_slave_1: entered allmulticast mode [ 1109.128043][ T199] usb 1-1: Using ep0 maxpacket: 8 [ 1109.130498][ T199] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1109.131280][T18357] bridge_slave_1: entered promiscuous mode [ 1109.141342][ T199] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1109.200857][ T199] usb 1-1: string descriptor 0 read error: -22 [ 1109.200953][ T199] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1109.200976][ T199] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1109.239472][T18357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.265679][ T199] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1109.287015][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1109.287354][T18472] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 1109.287406][T18472] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 1109.313207][T15496] Bluetooth: hci4: command 0x040f tx timeout [ 1109.313248][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 1109.313280][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 1109.313303][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1109.370438][T18357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.374599][ T199] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1109.408234][ T199] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1109.408305][ T199] usb 1-1: media controller created [ 1109.469248][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1109.521993][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4007'. [ 1109.546591][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1109.546642][T18475] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 1109.546705][T18475] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 1109.700345][T18357] team0: Port device team_slave_0 added [ 1109.714963][T18357] team0: Port device team_slave_1 added [ 1109.828104][T18483] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4007'. [ 1109.834594][ T199] zl10353_read_register: readreg error (reg=127, ret==0) [ 1109.856027][ T9] usb 3-1: USB disconnect, device number 64 [ 1109.950038][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1109.955883][ T199] usb 1-1: USB disconnect, device number 98 [ 1110.151673][T18357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.151690][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.151707][T18357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.205070][T18357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.205082][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.205097][T18357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.868891][ T199] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1110.876975][T18357] hsr_slave_0: entered promiscuous mode [ 1110.895934][T18357] hsr_slave_1: entered promiscuous mode [ 1110.897011][T18357] debugfs: 'hsr0' already exists in 'hsr' [ 1110.897035][T18357] Cannot create hsr debugfs directory [ 1110.925065][T18488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1110.925266][T18488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1110.925447][T18488] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1110.925609][T18488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1110.931048][T18488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1110.963473][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.964350][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.312712][T12784] hid-generic 0006:0008:0001.0035: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1111.349888][ T3384] bridge_slave_1: left promiscuous mode [ 1111.350138][ T3384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.408099][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1111.519049][ T3384] bridge_slave_0: left allmulticast mode [ 1111.519072][ T3384] bridge_slave_0: left promiscuous mode [ 1111.519275][ T3384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.538145][T12785] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1111.576295][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1111.576326][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.576346][ T9] usb 1-1: Product: syz [ 1111.576359][ T9] usb 1-1: Manufacturer: syz [ 1111.576373][ T9] usb 1-1: SerialNumber: syz [ 1111.637312][ T199] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1111.698672][T12785] usb 3-1: Using ep0 maxpacket: 32 [ 1111.702147][T12785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1111.704388][T12785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.704413][T12785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1111.708384][T12785] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1111.708412][T12785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.708431][T12785] usb 3-1: Product: syz [ 1111.708454][T12785] usb 3-1: Manufacturer: syz [ 1111.708467][T12785] usb 3-1: SerialNumber: syz [ 1111.925122][ T3384] dvmrp8: left allmulticast mode [ 1112.046316][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1112.046380][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1112.348287][T15496] Bluetooth: hci1: command 0x0406 tx timeout [ 1112.444180][T18520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.446268][T18520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.988269][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 1112.988359][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 1112.988383][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 1112.988442][T15496] Bluetooth: hci4: command 0x040f tx timeout [ 1113.309394][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1113.310434][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1113.467089][T18524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.470574][T18524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.505200][T18524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.510194][T18524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.997397][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 1113.997455][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1114.032129][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1114.069991][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1114.117344][ T9] usb 1-1: USB disconnect, device number 99 [ 1115.068750][T15496] Bluetooth: hci4: command 0x040f tx timeout [ 1115.520761][ T3384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.578896][ T3384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.600651][ T3384] bond0 (unregistering): Released all slaves [ 1115.615355][ T3384] bond1 (unregistering): Released all slaves [ 1115.638233][ T3384] bond2 (unregistering): Released all slaves [ 1115.656562][ T3384] bond3 (unregistering): Released all slaves [ 1115.699411][ T3384] bond4 (unregistering): (slave veth5): Releasing active interface [ 1115.770268][ T3384] bond4 (unregistering): Released all slaves [ 1116.119540][T12785] usb 3-1: unit 4 not found! [ 1116.119562][T12785] usb 3-1: unit 255 not found! [ 1116.239566][T18528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1116.239751][T18528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1116.239918][T18528] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1116.240090][T18528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1116.240272][T18528] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1116.393184][T12785] usb 3-1: USB disconnect, device number 65 [ 1116.467204][ T3384] tipc: Left network mode [ 1116.548106][T12784] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1116.613013][T17992] udevd[17992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1116.855008][T12784] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.855059][T12784] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1116.855086][T12784] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1116.855128][T12784] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1116.855151][T12784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.873618][T12784] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1116.874605][T12784] usb 1-1: invalid MIDI out EP 0 [ 1116.988255][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1117.536194][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.573132][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.673610][T12784] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1117.694064][T12784] usb 1-1: USB disconnect, device number 100 [ 1118.072775][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 1118.287874][ T5613] Bluetooth: hci4: command 0x040f tx timeout [ 1118.287915][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 1118.288236][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 1118.288267][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1118.288294][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1118.449325][T18582] bond0: Unable to set up delay as MII monitoring is disabled [ 1118.467623][T12784] hid_parser_main: 24 callbacks suppressed [ 1118.467644][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467672][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467697][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467729][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467754][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467779][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467804][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467828][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467853][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.467876][T12784] hid-generic 0006:0008:0001.0036: unknown main item tag 0x0 [ 1118.492138][T12784] hid-generic 0006:0008:0001.0036: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1118.493462][T18590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.497648][T18590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.916668][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1119.338981][ T3384] hsr_slave_0: left promiscuous mode [ 1119.378185][ T3384] hsr_slave_1: left promiscuous mode [ 1119.379604][ T3384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.379621][ T3384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.409082][ T3384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.409107][ T3384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.479059][T18594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1119.480036][T18594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1119.483169][T18594] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1119.483421][T18594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1119.484011][T18594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1119.575907][ T3384] veth1_macvtap: left promiscuous mode [ 1119.576010][ T3384] veth0_macvtap: left promiscuous mode [ 1119.576258][ T3384] veth1_vlan: left promiscuous mode [ 1119.582798][ T3384] veth0_vlan: left promiscuous mode [ 1119.796951][T18608] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4041'. [ 1120.008164][T12784] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1120.196301][T12784] usb 1-1: Using ep0 maxpacket: 32 [ 1120.199334][T12784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1120.200776][T12784] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.224773][T12784] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1120.224803][T12784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.224824][T12784] usb 1-1: Product: syz [ 1120.224838][T12784] usb 1-1: Manufacturer: syz [ 1120.224851][T12784] usb 1-1: SerialNumber: syz [ 1120.768372][T12784] usb 1-1: Cannot retrieve CPort count: -110 [ 1120.768418][T12784] usb 1-1: Cannot retrieve CPort count: -110 [ 1120.768453][T12784] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 1120.849393][ T3384] team0 (unregistering): Port device team_slave_1 removed [ 1120.928842][ T3384] team0 (unregistering): Port device team_slave_0 removed [ 1120.999117][T15496] Bluetooth: hci1: command 0x0406 tx timeout [ 1121.293393][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4041'. [ 1121.438674][T18614] dvmrp8: entered allmulticast mode [ 1121.548086][T15496] Bluetooth: hci4: command 0x040f tx timeout [ 1121.548124][T15496] Bluetooth: hci3: command 0x0c1a tx timeout [ 1121.548151][T15496] Bluetooth: hci5: command 0x0406 tx timeout [ 1121.548177][T15496] Bluetooth: hci2: command 0x0406 tx timeout [ 1121.561463][T18626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.562040][T18626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.663898][T18633] input: syz0 as /devices/virtual/input/input31 [ 1121.768429][T18633] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1121.906551][ T199] usb 1-1: USB disconnect, device number 101 [ 1122.159937][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.160005][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.822013][T12784] hid-generic 0006:0008:0001.0037: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1123.098078][T14590] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1123.198076][T12784] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1123.258093][T14590] usb 1-1: Using ep0 maxpacket: 32 [ 1123.263290][T14590] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1123.287903][T14590] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.287928][T14590] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1123.350879][T14590] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1123.350908][T14590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.357926][T14590] usb 1-1: Product: syz [ 1123.359248][T14590] usb 1-1: Manufacturer: syz [ 1123.359265][T14590] usb 1-1: SerialNumber: syz [ 1123.368173][T12784] usb 3-1: Using ep0 maxpacket: 8 [ 1123.370511][T12784] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1123.371884][T12784] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1123.374843][T12784] usb 3-1: string descriptor 0 read error: -22 [ 1123.374931][T12784] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1123.374955][T12784] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1123.389338][T12784] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1123.423473][T12784] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1123.431976][T12784] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1123.432081][T12784] usb 3-1: media controller created [ 1123.768443][T18663] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 1123.768529][T18663] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 1123.770977][T12784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.991370][T12784] zl10353_read_register: readreg error (reg=127, ret==0) [ 1124.388249][T18672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1124.389063][T18672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1124.389250][T18672] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1124.389448][T18672] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1124.389622][T18672] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1124.480875][T14590] usb 1-1: unit 4 not found! [ 1124.480898][T14590] usb 1-1: unit 255 not found! [ 1124.600990][ T3384] IPVS: stop unused estimator thread 0... [ 1124.750941][T12784] usb 3-1: USB disconnect, device number 66 [ 1124.903248][T14590] usb 1-1: USB disconnect, device number 102 [ 1125.245470][T17996] udevd[17996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.953088][T15496] Bluetooth: hci1: command 0x0406 tx timeout [ 1126.510891][T15496] Bluetooth: hci3: command 0x0c1a tx timeout [ 1126.510932][T15496] Bluetooth: hci2: command 0x0406 tx timeout [ 1126.510961][T15496] Bluetooth: hci5: command 0x0406 tx timeout [ 1126.510988][T15496] Bluetooth: hci4: command 0x040f tx timeout [ 1126.695434][T18714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.695603][T18712] dvmrp8: entered allmulticast mode [ 1126.708497][T18714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.754250][T18357] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1127.939539][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1128.036554][T18357] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1128.166690][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.256701][T18357] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1128.395946][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1128.396942][T18357] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1128.449480][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1129.177474][T18357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.273018][T18761] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1129.299352][T18357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.314879][T15203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.315002][T15203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.329145][T18746] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1129.329357][T18746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1129.329533][T18746] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1129.329703][T18746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1129.329879][T18746] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1129.354556][ T215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.354680][ T215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.419723][T18765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4068'. [ 1129.826852][T18778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.831124][T18778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.386825][T18793] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4077'. [ 1130.576913][T18797] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1130.628533][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'. [ 1130.628556][T18799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4079'. [ 1130.628791][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'. [ 1130.628806][T18799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4079'. [ 1130.669029][T14590] hid_parser_main: 24 callbacks suppressed [ 1130.669051][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669080][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669105][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669130][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669154][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669177][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669203][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669228][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669252][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.669277][T14590] hid-generic 0006:0008:0001.0038: unknown main item tag 0x0 [ 1130.701791][T14590] hid-generic 0006:0008:0001.0038: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1130.748654][T15496] Bluetooth: hci1: command 0x0406 tx timeout [ 1130.846137][T18803] fido_id[18803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1130.889249][ T5611] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1131.051138][ T5611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.055742][ T5611] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1131.055772][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.055792][ T5611] usb 1-1: Product: syz [ 1131.055806][ T5611] usb 1-1: Manufacturer: syz [ 1131.055821][ T5611] usb 1-1: SerialNumber: syz [ 1131.096006][ T5611] usb 1-1: config 0 descriptor?? [ 1131.152599][ T5611] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1131.388070][T15496] Bluetooth: hci4: command 0x040f tx timeout [ 1131.388112][T15496] Bluetooth: hci3: command 0x0c1a tx timeout [ 1131.388138][T15496] Bluetooth: hci5: command 0x0406 tx timeout [ 1131.388219][T15496] Bluetooth: hci2: command 0x0406 tx timeout [ 1131.813749][ T5611] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1131.814013][ T5611] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1132.132486][ T5611] usb 1-1: USB disconnect, device number 103 [ 1132.565226][T17990] udevd[17990]: setting mode of /dev/bus/usb/001/103 to 020664 failed: No such file or directory [ 1132.566117][T17990] udevd[17990]: setting owner of /dev/bus/usb/001/103 to uid=0, gid=0 failed: No such file or directory [ 1134.972615][T18357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.209917][T18836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4090'. [ 1138.393609][T18357] veth0_vlan: entered promiscuous mode [ 1138.419251][T18357] veth1_vlan: entered promiscuous mode [ 1138.479723][T18357] veth0_macvtap: entered promiscuous mode [ 1138.505599][T18851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.506779][T18851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.451726][T18357] veth1_macvtap: entered promiscuous mode [ 1141.939816][T18357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.481342][T18876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4100'. [ 1142.512988][T18357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.623352][T15203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.021549][T15203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.026832][T15203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.027399][T15203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.082262][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1143.480191][T18904] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1143.508065][T18894] syz.0.4105 (18894) used greatest stack depth: 17288 bytes left [ 1144.188060][ T5729] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1144.229533][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.229552][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.353414][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 1144.360876][ T5729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.360928][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 183, changing to 11 [ 1144.360954][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1144.360977][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1144.379765][ T5729] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1144.379796][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.379816][ T5729] usb 1-1: Product: syz [ 1144.379830][ T5729] usb 1-1: Manufacturer: syz [ 1144.379844][ T5729] usb 1-1: SerialNumber: syz [ 1144.644081][ T5729] usb 1-1: config 0 descriptor?? [ 1144.752007][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1144.859811][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.859833][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.921177][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.921234][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1144.921263][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1144.921307][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1144.921330][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.947903][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1144.955666][ T9] usb 3-1: invalid MIDI out EP 0 [ 1145.229798][T12784] usb 1-1: USB disconnect, device number 104 [ 1145.380157][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1145.423130][ T9] usb 3-1: USB disconnect, device number 67 [ 1146.485105][T15496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1146.525086][T15496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1146.526115][T12784] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1146.533365][T15496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1146.535345][T15496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1146.579325][T15496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1146.753682][T12784] usb 3-1: Using ep0 maxpacket: 16 [ 1146.770950][T12784] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.770970][T12784] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.770991][T12784] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1146.771004][T12784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.271176][T12784] mcp2221 0003:04D8:00DD.0039: unbalanced collection at end of report description [ 1147.271579][T12784] mcp2221 0003:04D8:00DD.0039: can't parse reports [ 1147.271637][T12784] mcp2221 0003:04D8:00DD.0039: probe with driver mcp2221 failed with error -22 [ 1147.532441][T18964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.532938][T18964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.742192][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4123'. [ 1147.798494][T18966] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1147.985478][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1148.045093][T18974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.045662][T18974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.439666][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.669032][T15496] Bluetooth: hci0: command tx timeout [ 1149.121965][ T37] audit: type=1326 audit(1783540428.207:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18947 comm="syz.2.4120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87c42de59 code=0x7fc00000 [ 1149.183188][ T5908] usb 3-1: USB disconnect, device number 68 [ 1149.476420][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.628401][ T5908] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1149.658096][T12784] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1149.687462][T18998] JFS: charset not found [ 1149.828476][ T5908] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.828523][ T5908] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1149.828551][ T5908] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1149.828589][ T5908] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1149.828612][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.869295][T12784] usb 5-1: Using ep0 maxpacket: 32 [ 1149.883498][T12784] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1149.883516][T12784] usb 5-1: config 0 has no interface number 0 [ 1149.905691][T12784] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1149.905710][T12784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.905722][T12784] usb 5-1: Product: syz [ 1149.905734][T12784] usb 5-1: Manufacturer: syz [ 1149.905747][T12784] usb 5-1: SerialNumber: syz [ 1149.960875][T12784] usb 5-1: config 0 descriptor?? [ 1149.964382][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.995745][ T5908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1149.996287][ T5908] usb 3-1: invalid MIDI out EP 0 [ 1150.614602][T19000] tipc: Started in network mode [ 1150.614632][T19000] tipc: Node identity 1eeb62efc83c, cluster identity 4711 [ 1150.658751][T19000] tipc: Enabled bearer , priority 0 [ 1150.748251][T15496] Bluetooth: hci0: command tx timeout [ 1150.960526][T18999] tipc: Resetting bearer [ 1150.985458][T19002] syzkaller0: entered promiscuous mode [ 1150.985485][T19002] syzkaller0: entered allmulticast mode [ 1151.177715][T18988] tipc: Resetting bearer [ 1151.383830][ T5908] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1151.600255][ T5908] usb 3-1: USB disconnect, device number 69 [ 1151.607286][T18988] tipc: Disabling bearer [ 1151.804550][T12784] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1151.805445][T12784] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1151.867184][T12784] usb 5-1: USB disconnect, device number 99 [ 1152.444597][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.839007][T15496] Bluetooth: hci0: command tx timeout [ 1152.953748][T18952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.954048][T18952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.954254][T18952] bridge_slave_0: entered allmulticast mode [ 1152.956824][T18952] bridge_slave_0: entered promiscuous mode [ 1152.965038][T18952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.965505][T18952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.965699][T18952] bridge_slave_1: entered allmulticast mode [ 1152.977082][T18952] bridge_slave_1: entered promiscuous mode [ 1153.145037][T19038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4142'. [ 1153.183947][T19038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.222470][T19038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.244128][T18952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.342600][ T5715] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1154.373025][T19024] dvmrp8: entered allmulticast mode [ 1154.399134][T18952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.488173][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 1154.491288][ T5715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1154.500553][ T5715] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.503689][ T5715] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1154.503718][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.503737][ T5715] usb 3-1: Product: syz [ 1154.503750][ T5715] usb 3-1: Manufacturer: syz [ 1154.503763][ T5715] usb 3-1: SerialNumber: syz [ 1154.657628][T19056] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1154.657655][T19056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1154.657788][T19056] vhci_hcd vhci_hcd.0: Device attached [ 1154.717494][T18952] team0: Port device team_slave_0 added [ 1154.769444][T19060] vhci_hcd: connection closed [ 1154.771016][ T6630] vhci_hcd vhci_hcd.5: stop threads [ 1154.771039][ T6630] vhci_hcd vhci_hcd.5: release socket [ 1154.772798][ T6630] vhci_hcd vhci_hcd.5: disconnect device [ 1154.773954][ T5715] usb 3-1: Cannot retrieve CPort count: -71 [ 1154.773991][ T5715] usb 3-1: Cannot retrieve CPort count: -71 [ 1154.774021][ T5715] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 1154.799770][ T5715] usb 3-1: USB disconnect, device number 70 [ 1154.865368][T18952] team0: Port device team_slave_1 added [ 1154.908744][T15496] Bluetooth: hci0: command tx timeout [ 1155.026789][T18952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.026805][T18952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.026831][T18952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.082461][T18952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.082478][T18952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.082505][T18952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.288538][ T66] bridge_slave_1: left allmulticast mode [ 1155.288572][ T66] bridge_slave_1: left promiscuous mode [ 1155.288819][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.498077][ T5908] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1155.517802][ T66] bridge_slave_0: left allmulticast mode [ 1155.517837][ T66] bridge_slave_0: left promiscuous mode [ 1155.522453][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.658769][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 1155.661545][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1155.662911][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.662937][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1155.665542][ T5908] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1155.665578][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.665598][ T5908] usb 5-1: Product: syz [ 1155.665613][ T5908] usb 5-1: Manufacturer: syz [ 1155.665627][ T5908] usb 5-1: SerialNumber: syz [ 1155.992062][ T66] dvmrp8: left allmulticast mode [ 1156.919708][T19099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.920240][T19099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.817516][T15496] Bluetooth: hci2: unexpected event for opcode 0x711c [ 1159.048969][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.128864][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.174136][ T66] bond0 (unregistering): Released all slaves [ 1159.200785][ T66] bond1 (unregistering): Released all slaves [ 1159.256065][ T66] bond2 (unregistering): Released all slaves [ 1159.333406][T19121] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1159.333425][T19121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1159.333514][T19121] vhci_hcd vhci_hcd.0: Device attached [ 1159.371890][T19125] vhci_hcd: connection closed [ 1159.372441][ T215] vhci_hcd vhci_hcd.5: stop threads [ 1159.372464][ T215] vhci_hcd vhci_hcd.5: release socket [ 1159.372503][ T215] vhci_hcd vhci_hcd.5: disconnect device [ 1159.409291][ T66] bond3 (unregistering): (slave veth3): Releasing active interface [ 1159.409375][ T66] veth0_virt_wifi: entered promiscuous mode [ 1159.499678][ T66] bond3 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 1159.547080][ T66] bond3 (unregistering): Released all slaves [ 1159.649725][T19127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.653184][T19127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.859589][ T5908] usb 5-1: unit 4 not found! [ 1159.859613][ T5908] usb 5-1: unit 255 not found! [ 1160.006508][ T5908] usb 5-1: USB disconnect, device number 100 [ 1160.123528][T18922] udevd[18922]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.233122][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1160.257195][T18952] hsr_slave_0: entered promiscuous mode [ 1160.264474][T18952] hsr_slave_1: entered promiscuous mode [ 1160.265343][T18952] debugfs: 'hsr0' already exists in 'hsr' [ 1160.265364][T18952] Cannot create hsr debugfs directory [ 1160.428096][ T5908] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1160.590673][ T5908] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.590733][ T5908] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1160.590765][ T5908] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.590809][ T5908] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1160.590834][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.638155][ T5958] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1160.677753][ T5908] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.686291][ T5908] usb 5-1: invalid MIDI out EP 0 [ 1160.828046][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 1160.834511][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1160.836902][ T5958] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1160.843373][ T5958] usb 3-1: string descriptor 0 read error: -22 [ 1160.843466][ T5958] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1160.843490][ T5958] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1160.983943][ T5958] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1161.020922][ T5958] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1161.021410][ T5958] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1161.021458][ T5958] usb 3-1: media controller created [ 1161.062947][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1161.197282][ T5958] zl10353_read_register: readreg error (reg=127, ret==0) [ 1161.289765][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4167'. [ 1161.289787][T19140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4167'. [ 1161.290037][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4167'. [ 1161.290052][T19140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4167'. [ 1161.347815][T19140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.361269][ T5908] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1161.361958][T19140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.391131][ T5908] usb 5-1: USB disconnect, device number 101 [ 1161.453607][ T5958] usb 3-1: USB disconnect, device number 71 [ 1162.998910][T10660] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1163.018419][ T66] hsr_slave_0: left promiscuous mode [ 1163.058117][ T66] hsr_slave_1: left promiscuous mode [ 1163.059090][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.059115][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.125436][T19164] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1163.125454][T19164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1163.126885][T19164] vhci_hcd vhci_hcd.0: Device attached [ 1163.148689][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.148715][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.158281][T10660] usb 3-1: Using ep0 maxpacket: 32 [ 1163.174599][T10660] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1163.186342][T10660] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.186368][T10660] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1163.207574][T10660] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1163.207604][T10660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.207624][T10660] usb 3-1: Product: syz [ 1163.207639][T10660] usb 3-1: Manufacturer: syz [ 1163.207653][T10660] usb 3-1: SerialNumber: syz [ 1163.234408][T19175] vhci_hcd: connection closed [ 1163.234920][ T3340] vhci_hcd vhci_hcd.5: stop threads [ 1163.234944][ T3340] vhci_hcd vhci_hcd.5: release socket [ 1163.235494][ T3340] vhci_hcd vhci_hcd.5: disconnect device [ 1163.298185][T12785] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1163.299972][ T66] veth1_macvtap: left promiscuous mode [ 1163.300032][ T66] veth0_macvtap: left promiscuous mode [ 1163.300209][ T66] veth1_vlan: left promiscuous mode [ 1163.300309][ T66] veth0_vlan: left promiscuous mode [ 1163.795729][T19179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.796687][T19179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.298710][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1164.360810][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1164.664491][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1164.702419][T10660] usb 3-1: unit 4 not found! [ 1164.702443][T10660] usb 3-1: unit 255 not found! [ 1164.771512][T10660] usb 3-1: USB disconnect, device number 72 [ 1164.851032][T18922] udevd[18922]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1166.296925][T19186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.297522][T19186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.808132][ T5331] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1166.826439][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4180'. [ 1166.960289][ T5331] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.960352][ T5331] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.960438][ T5331] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1166.960481][ T5331] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1166.960503][ T5331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.033118][ T5331] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1167.034250][ T5331] usb 5-1: invalid MIDI out EP 0 [ 1167.301686][ T5331] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1167.394021][T19221] udevd[19221]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1167.610575][ T5908] usb 5-1: USB disconnect, device number 102 [ 1167.724139][T19230] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1167.724167][T19230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1167.724258][T19230] vhci_hcd vhci_hcd.0: Device attached [ 1167.901493][T19231] vhci_hcd: connection closed [ 1167.901909][ T6630] vhci_hcd vhci_hcd.2: stop threads [ 1167.901930][ T6630] vhci_hcd vhci_hcd.2: release socket [ 1167.902143][ T6630] vhci_hcd vhci_hcd.2: disconnect device [ 1167.905018][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4185'. [ 1167.948109][ T5331] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1167.962006][T19238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.962585][T19238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.762314][ T66] IPVS: stop unused estimator thread 0... [ 1168.994297][T19254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.997127][T19254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.686325][T19269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.686792][T19269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.311123][T19283] JFS: charset not found [ 1171.014444][T18952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1171.024885][T10660] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1171.070030][T18952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1171.071443][T18952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1171.129632][T18952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1171.130603][T18952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1171.168670][T10660] usb 3-1: Using ep0 maxpacket: 32 [ 1171.176121][T10660] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1171.177640][T10660] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.205184][T10660] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1171.205214][T10660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.205228][T10660] usb 3-1: Product: syz [ 1171.205235][T10660] usb 3-1: Manufacturer: syz [ 1171.205243][T10660] usb 3-1: SerialNumber: syz [ 1171.244647][T18952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.256220][T18952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1171.317678][T18952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1171.452292][T10660] usb 3-1: Cannot retrieve CPort count: -71 [ 1171.452321][T10660] usb 3-1: Cannot retrieve CPort count: -71 [ 1171.452342][T10660] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 1171.500753][T10660] usb 3-1: USB disconnect, device number 73 [ 1171.975783][T18952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.066198][T18952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.127852][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.129475][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.167520][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.167664][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.870879][T19315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1172.871463][T19315] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1172.871726][T19315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1172.871977][T19315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1172.872632][T19315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1172.872746][T19315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1172.999694][T19315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1173.853483][T18952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.207215][T18952] veth0_vlan: entered promiscuous mode [ 1174.242309][T18952] veth1_vlan: entered promiscuous mode [ 1174.299593][T18952] veth0_macvtap: entered promiscuous mode [ 1174.336325][T18952] veth1_macvtap: entered promiscuous mode [ 1174.380585][T18952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.423891][T18952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.456488][T15496] Bluetooth: hci2: command 0x0406 tx timeout [ 1174.908532][T15496] Bluetooth: hci0: command 0x0c1a tx timeout [ 1174.922433][T15496] Bluetooth: hci4: command 0x040f tx timeout [ 1174.936095][T15496] Bluetooth: hci3: command 0x0c1a tx timeout [ 1174.936259][T15496] Bluetooth: hci5: command 0x0406 tx timeout [ 1175.470135][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.473221][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.514261][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.517258][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.216187][ T5729] hid_parser_main: 7 callbacks suppressed [ 1176.216203][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216221][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216236][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216251][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216266][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216280][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216295][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216309][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216324][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.216338][ T5729] hid-generic 0006:0008:0001.003A: unknown main item tag 0x0 [ 1176.343119][ T5729] hid-generic 0006:0008:0001.003A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1176.488316][ T5617] Bluetooth: hci5: unexpected event for opcode 0x711c [ 1176.679521][ T5908] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1176.837347][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 1176.864646][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1176.866279][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.866303][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1176.913337][ T5908] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1176.913368][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.913388][ T5908] usb 5-1: Product: syz [ 1176.913402][ T5908] usb 5-1: Manufacturer: syz [ 1176.913417][ T5908] usb 5-1: SerialNumber: syz [ 1176.992813][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 1177.281855][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.281874][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.498050][T18910] udevd[18910]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 1177.498203][T18910] udevd[18910]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 1177.660632][ T5908] usb 5-1: unit 4 not found! [ 1177.660660][ T5908] usb 5-1: unit 255 not found! [ 1177.806220][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.806250][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.892431][ T5908] usb 5-1: USB disconnect, device number 103 [ 1178.025110][T18922] udevd[18922]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1178.076348][T19398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1178.076569][T19398] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1178.076739][T19398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1178.076910][T19398] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1178.077086][T19398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1178.113255][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.113834][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.428139][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1178.552368][T19414] JFS: charset not found [ 1179.036450][T19425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.037242][T19425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.645112][T19432] input: syz0 as /devices/virtual/input/input32 [ 1179.788128][T19402] Bluetooth: hci2: command 0x0406 tx timeout [ 1179.828247][T19432] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1180.212396][T19402] Bluetooth: hci5: command 0x0406 tx timeout [ 1180.212537][T19402] Bluetooth: hci0: command 0x0c1a tx timeout [ 1180.212657][T19402] Bluetooth: hci3: command 0x0c1a tx timeout [ 1180.673871][T19437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1180.701827][T19437] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1180.724567][T19437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1180.845385][T19437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1180.866009][T19437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1180.878065][ T5715] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1181.028077][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 1181.031062][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1181.031082][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1181.031094][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1181.031108][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1181.033154][ T5715] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1181.033170][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.033181][ T5715] usb 3-1: Product: syz [ 1181.033189][ T5715] usb 3-1: Manufacturer: syz [ 1181.033196][ T5715] usb 3-1: SerialNumber: syz [ 1181.042550][ T5715] usb 3-1: config 0 descriptor?? [ 1181.066394][ T5715] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 1181.106166][ T4950] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1181.202658][ T4950] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1181.275057][T19452] input: syz0 as /devices/virtual/input/input34 [ 1181.288515][ T4950] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1181.318546][T19458] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1181.351884][ T5715] usb 3-1: USB disconnect, device number 74 [ 1181.356389][T19459] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4233'. [ 1181.373314][T19454] ---------[ 1181.373314][T19454] ------------[ cut here ]------------ [ 1181.373328][T19454] kcov->t != t [ 1181.373342][T19454] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#0: syz.5.4232/19454 [ 1181.373539][T19454] Modules linked in: [ 1181.373569][T19454] CPU: 0 UID: 0 PID: 19454 Comm: syz.5.4232 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1181.373630][T19454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1181.373650][T19454] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1181.373712][T19454] Code: 90 00 00 00 e8 50 cb 57 00 4c 89 f7 5b 41 5e 41 5f e9 f3 8b 5d 00 7c 40 5b 41 5e 41 5f e9 87 ec 7f 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1181.373731][T19454] RSP: 0018:ffffc900052dfd20 EFLAGS: 00010206 [ 1181.373777][T19454] RAX: db0b7f573dabb900 RBX: ffff8880273f1f00 RCX: 0000000000000000 [ 1181.373792][T19454] RDX: 0000000014dee08c RSI: ffffffff8bca5f60 RDI: 00000000ffffffff [ 1181.373807][T19454] RBP: ffffc900052dfe80 R08: ffffffff8b43b9a0 R09: 0000000000000000 [ 1181.373823][T19454] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 1181.373836][T19454] R13: ffff8880273f1f00 R14: ffff8880414ea400 R15: ffff8880414ea408 [ 1181.373851][T19454] FS: 000055559549a500(0000) GS:ffff888125c4c000(0000) knlGS:0000000000000000 [ 1181.373869][T19454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1181.373884][T19454] CR2: 00007fce561e2bb1 CR3: 0000000040f4a000 CR4: 00000000003526f0 [ 1181.373902][T19454] Call Trace: [ 1181.373941][T19454] [ 1181.374009][T19454] do_exit+0x159/0x2360 [ 1181.374126][T19454] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1181.374250][T19454] ? lockdep_hardirqs_on+0x7a/0x110 [ 1181.374305][T19454] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1181.374330][T19454] ? __pfx_do_exit+0x10/0x10 [ 1181.374372][T19454] do_group_exit+0x22d/0x2f0 [ 1181.374402][T19454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.374451][T19454] __x64_sys_exit_group+0x3f/0x40 [ 1181.374487][T19454] x64_sys_call+0x221a/0x2240 [ 1181.374536][T19454] do_syscall_64+0x174/0x580 [ 1181.374594][T19454] ? trace_irq_disable+0x3b/0x140 [ 1181.374645][T19454] ? clear_bhb_loop+0x40/0x90 [ 1181.374671][T19454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.374690][T19454] RIP: 0033:0x7fb17af3de59 [ 1181.374716][T19454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.374755][T19454] RSP: 002b:00007ffe3c18e2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1181.374777][T19454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb17af3de59 [ 1181.374792][T19454] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1181.374805][T19454] RBP: 00007ffe3c18e35c R08: 0000000000000000 R09: 00000000000927c0 [ 1181.374819][T19454] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001a7 [ 1181.374832][T19454] R13: 00000000000927c0 R14: 000000000011faa4 R15: 00007ffe3c18e3b0 [ 1181.374863][T19454] [ 1181.374874][T19454] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1181.374893][T19454] CPU: 0 UID: 0 PID: 19454 Comm: syz.5.4232 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1181.374917][T19454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1181.374929][T19454] Call Trace: [ 1181.374938][T19454] [ 1181.374946][T19454] vpanic+0x56c/0xa60 [ 1181.374978][T19454] ? __pfx__printk+0x10/0x10 [ 1181.375002][T19454] ? __pfx_vpanic+0x10/0x10 [ 1181.375020][T19454] ? is_bpf_text_address+0x292/0x2b0 [ 1181.375076][T19454] ? is_bpf_text_address+0x26/0x2b0 [ 1181.375106][T19454] panic+0xc5/0xd0 [ 1181.375126][T19454] ? __pfx_panic+0x10/0x10 [ 1181.375160][T19454] __warn+0x315/0x4c0 [ 1181.375179][T19454] ? kcov_task_exit+0x181/0x240 [ 1181.375209][T19454] ? kcov_task_exit+0x181/0x240 [ 1181.375237][T19454] __report_bug+0x331/0x530 [ 1181.375334][T19454] ? trace_sched_exit_tp+0x3a/0x130 [ 1181.375391][T19454] ? kcov_task_exit+0x181/0x240 [ 1181.375430][T19454] ? __pfx___report_bug+0x10/0x10 [ 1181.375461][T19454] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1181.375494][T19454] ? rt_spin_lock+0x1e0/0x400 [ 1181.375516][T19454] ? rt_spin_lock+0x1e0/0x400 [ 1181.375541][T19454] ? kcov_task_exit+0x181/0x240 [ 1181.375567][T19454] report_bug+0x16a/0x220 [ 1181.375596][T19454] ? kcov_task_exit+0x181/0x240 [ 1181.375622][T19454] ? kcov_task_exit+0x183/0x240 [ 1181.375648][T19454] handle_bug+0x9c/0x200 [ 1181.375668][T19454] exc_invalid_op+0x1a/0x50 [ 1181.375686][T19454] asm_exc_invalid_op+0x1a/0x20 [ 1181.375705][T19454] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1181.375734][T19454] Code: 90 00 00 00 e8 50 cb 57 00 4c 89 f7 5b 41 5e 41 5f e9 f3 8b 5d 00 7c 40 5b 41 5e 41 5f e9 87 ec 7f 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1181.375751][T19454] RSP: 0018:ffffc900052dfd20 EFLAGS: 00010206 [ 1181.375768][T19454] RAX: db0b7f573dabb900 RBX: ffff8880273f1f00 RCX: 0000000000000000 [ 1181.375782][T19454] RDX: 0000000014dee08c RSI: ffffffff8bca5f60 RDI: 00000000ffffffff [ 1181.375796][T19454] RBP: ffffc900052dfe80 R08: ffffffff8b43b9a0 R09: 0000000000000000 [ 1181.375809][T19454] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 1181.375821][T19454] R13: ffff8880273f1f00 R14: ffff8880414ea400 R15: ffff8880414ea408 [ 1181.375843][T19454] ? rt_spin_lock+0x1e0/0x400 [ 1181.375873][T19454] do_exit+0x159/0x2360 [ 1181.375903][T19454] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1181.375930][T19454] ? lockdep_hardirqs_on+0x7a/0x110 [ 1181.375956][T19454] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1181.375983][T19454] ? __pfx_do_exit+0x10/0x10 [ 1181.376026][T19454] do_group_exit+0x22d/0x2f0 [ 1181.376056][T19454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.376084][T19454] __x64_sys_exit_group+0x3f/0x40 [ 1181.376114][T19454] x64_sys_call+0x221a/0x2240 [ 1181.376134][T19454] do_syscall_64+0x174/0x580 [ 1181.376161][T19454] ? trace_irq_disable+0x3b/0x140 [ 1181.376181][T19454] ? clear_bhb_loop+0x40/0x90 [ 1181.376205][T19454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.376224][T19454] RIP: 0033:0x7fb17af3de59 [ 1181.376241][T19454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.376258][T19454] RSP: 002b:00007ffe3c18e2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1181.376277][T19454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb17af3de59 [ 1181.376292][T19454] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1181.376305][T19454] RBP: 00007ffe3c18e35c R08: 0000000000000000 R09: 00000000000927c0 [ 1181.376318][T19454] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001a7 [ 1181.376338][T19454] R13: 00000000000927c0 R14: 000000000011faa4 R15: 00007ffe3c18e3b0 [ 1181.376370][T19454] [ 1181.376637][T19454] Kernel Offset: disabled