last executing test programs: 21.916588785s ago: executing program 4 (id=4885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086201, &(0x7f00000001c0)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x40800) 20.723842812s ago: executing program 4 (id=4887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04300300e900"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000779000/0x400000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r5) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x701, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x86}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0xd0}, 0x44000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x3, &(0x7f0000000100)=[{0x3ff, 0x1, 0x3, 0x6}, {0xff, 0x2, 0x1, 0x4}, {0x7ff, 0x6d, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x4024}, 0x2000800) 19.642036426s ago: executing program 0 (id=4891): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) 17.54573244s ago: executing program 0 (id=4892): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x3f, 0x8}) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000280)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x400) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x2000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$netlink(0x10, 0x3, 0x0) 15.044179467s ago: executing program 4 (id=4894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) fcntl$dupfd(r2, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000014}) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000100)={r3}) mlockall(0x7) r5 = syz_open_dev$dri(0x0, 0x800, 0x608180) ioctl$XFS_IOC_FSCOUNTS(r5, 0x80205871, 0x0) syz_open_dev$sndctrl(0x0, 0xf32, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe0500040000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) 13.803476825s ago: executing program 3 (id=4897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086201, &(0x7f00000001c0)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x40800) 12.534469294s ago: executing program 3 (id=4898): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xf749}], 0x5, 0x40012100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000280)="0f01cf66f30f52af0060000066baf80cb808de698aef66bafc0c66b8000066efdbd5b9b50800000f32c4e2aaf5620ff3660f32c4e1fd6f4ed466b8da008ec866baf80cb86481d389ef66bafc0cb8d4600000ef", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.441434047s ago: executing program 1 (id=4899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0xffffffff, 0x0, &(0x7f0000000000)=0x80000003, 0x4fffffe) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) r4 = dup(r3) syz_clone3(&(0x7f0000000080)={0x105824100, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000"], 0xf0}}, 0x0) 11.808382427s ago: executing program 0 (id=4901): syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280), 0x0, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 10.689831991s ago: executing program 0 (id=4902): writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 10.502456837s ago: executing program 1 (id=4904): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {0x0}, {0x0}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {0x0}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f", 0x46}], 0x7) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xac49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.593637835s ago: executing program 0 (id=4905): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04300300e900"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000779000/0x400000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r5) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x701, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0xd0}, 0x44000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x3, &(0x7f0000000100)=[{0x3ff, 0x1, 0x3, 0x6}, {0xff, 0x2, 0x1, 0x4}, {0x7ff, 0x6d, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x4024}, 0x2000800) 8.855520567s ago: executing program 1 (id=4906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x20040481) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x40) syz_io_uring_setup(0x1073, &(0x7f0000000300)={0x0, 0xa902, 0x0, 0x2, 0xbfdbfdfc}, &(0x7f0000000000), &(0x7f00000001c0), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001480)=ANY=[], 0x11) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 8.646672414s ago: executing program 2 (id=4907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) fcntl$dupfd(r2, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000014}) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000100)={r3}) syz_open_dev$dri(0x0, 0x800, 0x608180) syz_open_dev$sndctrl(0x0, 0xf32, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe0500040000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) 7.050343183s ago: executing program 1 (id=4908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086201, &(0x7f00000001c0)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x40800) 5.750703083s ago: executing program 1 (id=4909): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000004ac0)={0x1, 'bond0\x00', 0x3}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='a'], 0x8) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000003c0)) 5.643321026s ago: executing program 3 (id=4910): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x100, 0x80000000, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80000000, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfe0, 0xfffffff8, 0x9, 0x3, 0x7ff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0x0, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 4.88604497s ago: executing program 2 (id=4911): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x3f, 0x8}) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000280)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x400) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x2000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$netlink(0x10, 0x3, 0x0) 4.629769198s ago: executing program 4 (id=4912): syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280), 0x0, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 3.947191338s ago: executing program 2 (id=4913): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) 3.826342222s ago: executing program 3 (id=4914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0xffffffff, 0x0, &(0x7f0000000000)=0x80000003, 0x4fffffe) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) r4 = dup(r3) syz_clone3(&(0x7f0000000080)={0x105824100, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000"], 0xf0}}, 0x0) 3.113248684s ago: executing program 1 (id=4915): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = inotify_init() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="08001c", @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4880) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r2, 0x100004) listen(r5, 0x5) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000040a01010000000000000000010000090400048050000480080002401bbf2c220800024068ec1c94140003006970766c616e310000000000000000001400030076657468305f746f5f6272696467650014000300677265300000000000000000000000000a000700726f75746dcfb9a0"], 0x74}, 0x1, 0x0, 0x0, 0x2040005}, 0x40000) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 2.95124406s ago: executing program 2 (id=4916): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {0x0}, {0x0}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {0x0}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f", 0x46}], 0x7) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xac49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.492061544s ago: executing program 4 (id=4917): r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "a3505892", {0x3, 0x107, 0x0, 0x6, 0x1, 0x6, 0x3}}) 1.546531363s ago: executing program 2 (id=4918): writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 1.458321155s ago: executing program 3 (id=4919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086201, &(0x7f00000001c0)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x40800) 249.295852ms ago: executing program 3 (id=4920): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x6, 0x40000002, 0x0) 223.664324ms ago: executing program 0 (id=4921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r3, r4}) socket$alg(0x26, 0x5, 0x0) 138.298976ms ago: executing program 2 (id=4922): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, 0x0, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) syz_open_dev$vim2m(0x0, 0x7, 0x2) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 4 (id=4923): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, r2, 0x24, 0x0, 0xffffffffffffffff, @void, @value=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0x4, 0x102, 0x0, {0x0, 0x1000, 0x7, 0xa0}}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003840)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}}, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) kernel console output (not intermixed with test programs): 259] libceph: mon0 (1)[c::]:6789 connect error [ 1529.480966][T16421] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1529.780564][T18070] ceph: No mds server is up or the cluster is laggy [ 1529.794135][T11144] libceph: connect (1)[c::]:6789 error -101 [ 1529.800130][T11144] libceph: mon0 (1)[c::]:6789 connect error [ 1530.038301][T16421] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1530.090557][T16421] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.107598][T16421] usb 5-1: config 0 has no interfaces? [ 1530.114981][T16421] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1530.126021][T16421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.354629][T16421] usb 5-1: config 0 descriptor?? [ 1531.460704][ T4317] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1531.663495][ T4317] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1531.684223][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.738139][ T4317] usb 4-1: config 0 has no interfaces? [ 1531.765668][ T4317] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1531.804209][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.859475][ T4317] usb 4-1: config 0 descriptor?? [ 1531.906871][ T4319] usb 5-1: USB disconnect, device number 94 [ 1532.353220][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1532.362702][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1532.372063][T18111] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1532.389015][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1532.398721][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1532.408074][T18111] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1534.546708][ T22] usb 4-1: USB disconnect, device number 102 [ 1536.390474][T11144] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1536.743501][T11144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.880803][T11144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.940549][T11144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.000432][T11144] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1537.009495][T11144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.071056][T11144] usb 5-1: config 0 descriptor?? [ 1538.779053][T11144] usbhid 5-1:0.0: can't add hid device: -71 [ 1538.805367][T11144] usbhid: probe of 5-1:0.0 failed with error -71 [ 1538.832364][T11144] usb 5-1: USB disconnect, device number 95 [ 1541.470430][ T4259] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1541.687098][T18177] lo speed is unknown, defaulting to 1000 [ 1541.691852][ T4259] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1541.710515][ T4259] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.778752][ T4259] usb 5-1: config 0 has no interfaces? [ 1541.815004][ T4259] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1541.839859][ T4259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.887748][ T4259] usb 5-1: config 0 descriptor?? [ 1542.418618][T16421] libceph: connect (1)[c::]:6789 error -101 [ 1542.431337][T16421] libceph: mon0 (1)[c::]:6789 connect error [ 1542.444628][T16421] libceph: connect (1)[c::]:6789 error -101 [ 1542.539949][T16421] libceph: mon0 (1)[c::]:6789 connect error [ 1543.229827][T16421] libceph: connect (1)[c::]:6789 error -101 [ 1543.236151][T18189] ceph: No mds server is up or the cluster is laggy [ 1543.245923][T16421] libceph: mon0 (1)[c::]:6789 connect error [ 1543.371656][T16421] usb 5-1: USB disconnect, device number 96 [ 1544.193588][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 1544.199657][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 1544.889456][ T4354] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1545.148269][ T4354] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.168524][ T4354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.194593][ T4354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.218152][ T4354] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1545.233114][ T4354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.389004][ T4354] usb 3-1: config 0 descriptor?? [ 1546.133689][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.140198][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.164488][ T4354] usbhid 3-1:0.0: can't add hid device: -71 [ 1546.182675][ T4354] usbhid: probe of 3-1:0.0 failed with error -71 [ 1546.228106][ T4354] usb 3-1: USB disconnect, device number 94 [ 1546.470401][T16421] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1546.660372][T16421] usb 4-1: Using ep0 maxpacket: 16 [ 1546.667160][T16421] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.718093][T16421] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.740512][T16421] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1546.756521][T16421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.997055][T18236] lo speed is unknown, defaulting to 1000 [ 1547.196645][T16421] usbhid 4-1:128.0: can't add hid device: -71 [ 1547.206422][T16421] usbhid: probe of 4-1:128.0 failed with error -71 [ 1547.233823][T16421] usb 4-1: USB disconnect, device number 103 [ 1548.106100][ T4354] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1548.326249][ T4354] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1548.355774][ T4354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.401459][ T4354] usb 1-1: config 0 has no interfaces? [ 1548.433530][ T4354] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1548.507643][ T4354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.551285][ T4354] usb 1-1: config 0 descriptor?? [ 1548.645315][ T4354] libceph: connect (1)[c::]:6789 error -101 [ 1548.651532][ T4354] libceph: mon0 (1)[c::]:6789 connect error [ 1548.930700][ T4354] libceph: connect (1)[c::]:6789 error -101 [ 1549.419355][T18254] ceph: No mds server is up or the cluster is laggy [ 1549.479489][ T4354] libceph: mon0 (1)[c::]:6789 connect error [ 1549.687454][T18266] netlink: 7080 bytes leftover after parsing attributes in process `syz.2.3849'. [ 1550.417357][ T124] usb 1-1: USB disconnect, device number 101 [ 1550.941838][T18277] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1550.973770][T18269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3850'. [ 1551.133364][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1551.146376][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1552.510382][ T22] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1552.703576][T18289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.710991][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 1552.717684][ T22] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.788819][ T22] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.823545][ T22] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1552.834468][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.272917][ T22] usbhid 5-1:128.0: can't add hid device: -71 [ 1553.289625][ T22] usbhid: probe of 5-1:128.0 failed with error -71 [ 1553.349714][ T22] usb 5-1: USB disconnect, device number 97 [ 1554.756251][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.784046][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.040383][ T6405] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1555.235474][ T6405] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1555.257771][ T6405] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.307269][ T6405] usb 5-1: config 0 has no interfaces? [ 1555.319814][ T6405] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1555.367410][ T6405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.391586][ T6405] usb 5-1: config 0 descriptor?? [ 1555.640187][T13506] libceph: connect (1)[c::]:6789 error -101 [ 1555.707826][T13506] libceph: mon0 (1)[c::]:6789 connect error [ 1556.428567][T18317] ceph: No mds server is up or the cluster is laggy [ 1556.479789][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1556.487559][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1556.496762][T18289] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.518464][T18289] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.528383][T18289] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.557580][T18289] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.865018][ T4350] lo speed is unknown, defaulting to 1000 [ 1557.169969][T18329] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1557.202345][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'. [ 1557.229606][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3865'. [ 1557.767263][ T6405] usb 5-1: USB disconnect, device number 98 [ 1560.398853][ T6405] libceph: connect (1)[c::]:6789 error -101 [ 1560.410514][ T6405] libceph: mon0 (1)[c::]:6789 connect error [ 1561.219484][ T6405] libceph: connect (1)[c::]:6789 error -101 [ 1561.233739][T18362] ceph: No mds server is up or the cluster is laggy [ 1561.261211][ T6405] libceph: mon0 (1)[c::]:6789 connect error [ 1561.838260][T18363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.845637][T18363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.800698][ T7] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1563.701315][ T7] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 1563.714312][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.839445][ T7] usb 3-1: config 0 has no interfaces? [ 1563.846209][ T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1563.877452][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.894833][ T7] usb 3-1: config 0 descriptor?? [ 1563.939849][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.037476][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.202677][T18363] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.270357][T18363] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.309732][T18363] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.342644][T18363] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.807366][T18377] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1565.832196][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1565.854417][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1565.918848][T18407] lo speed is unknown, defaulting to 1000 [ 1565.946483][ T22] usb 3-1: USB disconnect, device number 95 [ 1567.467855][T18437] lo speed is unknown, defaulting to 1000 [ 1570.183711][T18456] netlink: 7080 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1571.693914][T18467] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1571.715818][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3899'. [ 1571.726361][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3899'. [ 1571.958564][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1572.075824][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1572.758527][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1572.765180][T18474] ceph: No mds server is up or the cluster is laggy [ 1572.803784][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1572.848601][T18487] lo speed is unknown, defaulting to 1000 [ 1573.692885][T18315] libceph: connect (1)[c::]:6789 error -101 [ 1573.708280][T18315] libceph: mon0 (1)[c::]:6789 connect error [ 1575.836931][T18520] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1575.989124][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3913'. [ 1576.021921][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3913'. [ 1576.254254][T18526] netlink: 7080 bytes leftover after parsing attributes in process `syz.0.3914'. [ 1576.416084][T18526] input: syz1 as /devices/virtual/input/input183 [ 1577.176306][T18532] tipc: Started in network mode [ 1577.209373][T18532] tipc: Node identity 16aec115ba2f, cluster identity 4711 [ 1577.249744][T18532] tipc: Enabled bearer , priority 0 [ 1578.773653][T18534] device syzkaller0 entered promiscuous mode [ 1578.790573][ T124] tipc: Node number set to 2894184725 [ 1578.798823][T18532] tipc: Resetting bearer [ 1578.835368][T18531] tipc: Resetting bearer [ 1579.088888][T18531] tipc: Disabling bearer [ 1579.952525][T18557] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1580.729024][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3925'. [ 1580.871678][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3925'. [ 1580.994056][T18555] trusted_key: encrypted_key: insufficient parameters specified [ 1581.182845][T13506] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1581.404306][T13506] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1581.437927][T13506] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.506647][T13506] usb 1-1: config 0 has no interfaces? [ 1581.540510][T13506] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1581.603209][T13506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.661213][T13506] usb 1-1: config 0 descriptor?? [ 1581.791102][ T22] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1581.994423][ T22] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1582.022405][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.062636][ T22] usb 5-1: config 0 has no interfaces? [ 1582.089880][ T22] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1582.128575][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.185813][ T22] usb 5-1: config 0 descriptor?? [ 1583.519584][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3927'. [ 1583.534655][T18590] xt_TCPMSS: Only works on TCP SYN packets [ 1583.544205][T18590] tmpfs: Bad value for 'mpol' [ 1584.533625][T18315] usb 5-1: USB disconnect, device number 99 [ 1586.405554][ T22] usb 1-1: USB disconnect, device number 102 [ 1586.811611][T18618] lo speed is unknown, defaulting to 1000 [ 1588.109810][T18631] lo speed is unknown, defaulting to 1000 [ 1588.760636][T13506] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1589.190837][T13506] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1589.207466][T13506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.218235][T13506] usb 5-1: config 0 has no interfaces? [ 1589.229795][T13506] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1589.239520][T13506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.261814][T13506] usb 5-1: config 0 descriptor?? [ 1589.596234][T18649] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1589.612748][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 1589.646213][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3939'. [ 1591.723811][ T124] usb 5-1: USB disconnect, device number 100 [ 1592.145213][T18667] lo speed is unknown, defaulting to 1000 [ 1593.743529][T18692] lo speed is unknown, defaulting to 1000 [ 1595.765781][T18710] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1595.766628][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3959'. [ 1595.766641][T18710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3959'. [ 1596.304775][ T124] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1596.803951][ T124] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1596.830566][ T124] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.856961][ T124] usb 4-1: config 0 has no interfaces? [ 1596.862850][ T124] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1596.918281][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.922918][T13506] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1596.971162][ T124] usb 4-1: config 0 descriptor?? [ 1597.712372][T13506] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1597.733763][ T124] usb 4-1: can't set config #0, error -71 [ 1597.743102][ T124] usb 4-1: USB disconnect, device number 104 [ 1597.751546][T13506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.872565][T13506] usb 5-1: config 0 has no interfaces? [ 1597.878134][T13506] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1597.887499][T13506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.897725][T13506] usb 5-1: config 0 descriptor?? [ 1599.299189][T18750] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1599.314325][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1599.323873][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1599.725902][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1599.741730][T18758] xt_TCPMSS: Only works on TCP SYN packets [ 1599.752021][T18758] tmpfs: Bad value for 'mpol' [ 1600.590739][ T4317] usb 5-1: USB disconnect, device number 101 [ 1602.915403][ T6405] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1604.095423][T18793] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1604.142272][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1604.173266][ T6405] usb 5-1: device descriptor read/all, error -71 [ 1604.262821][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1606.440689][ T6405] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1606.641683][ T6405] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1606.652437][ T6405] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.681161][ T6405] usb 1-1: config 0 has no interfaces? [ 1607.858772][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.865125][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.871785][ T6405] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1607.880979][ T6405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.903763][ T6405] usb 1-1: config 0 descriptor?? [ 1609.060575][ T6405] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1609.198937][T11144] usb 1-1: USB disconnect, device number 103 [ 1609.333354][ T6405] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 1609.353484][ T6405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.533973][ T6405] usb 2-1: config 0 has no interfaces? [ 1609.568334][ T6405] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1609.601910][ T6405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.925943][ T6405] usb 2-1: config 0 descriptor?? [ 1609.975236][ T6405] usb 2-1: can't set config #0, error -71 [ 1610.017776][ T6405] usb 2-1: USB disconnect, device number 106 [ 1611.132386][T18862] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1611.188779][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3999'. [ 1611.207143][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3999'. [ 1611.806745][T18881] lo speed is unknown, defaulting to 1000 [ 1613.590729][T13506] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1613.670365][ T4317] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1613.791833][T13506] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.804386][T13506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.816386][T13506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.863356][ T4317] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1613.872165][T13506] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1613.886939][ T4317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.897674][T13506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.906140][ T4317] usb 5-1: config 0 has no interfaces? [ 1613.912275][ T4317] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1613.943257][T13506] usb 1-1: config 0 descriptor?? [ 1613.952226][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.006995][ T4317] usb 5-1: config 0 descriptor?? [ 1614.366729][T13506] usbhid 1-1:0.0: can't add hid device: -71 [ 1614.375304][T13506] usbhid: probe of 1-1:0.0 failed with error -71 [ 1614.407125][T13506] usb 1-1: USB disconnect, device number 104 [ 1614.627637][T18903] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1614.644103][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1614.653661][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1614.801911][T18906] device gtp0 entered promiscuous mode [ 1614.937786][T18910] lo speed is unknown, defaulting to 1000 [ 1616.522453][T13506] usb 5-1: USB disconnect, device number 104 [ 1616.587929][T18926] lo speed is unknown, defaulting to 1000 [ 1618.860365][T13888] Bluetooth: hci2: command 0x0405 tx timeout [ 1621.438013][ T26] audit: type=1326 audit(1779396578.798:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1621.493575][ T26] audit: type=1326 audit(1779396578.798:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1621.519303][ T26] audit: type=1326 audit(1779396578.798:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1621.602091][ T26] audit: type=1326 audit(1779396578.808:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1621.626679][ T22] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1621.666929][ T26] audit: type=1326 audit(1779396578.808:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1621.700876][ T26] audit: type=1326 audit(1779396578.808:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1621.749959][ T26] audit: type=1326 audit(1779396578.808:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1621.831821][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.858140][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.904181][ T26] audit: type=1326 audit(1779396578.808:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1621.940126][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.065913][ T26] audit: type=1326 audit(1779396578.818:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1622.091419][ T22] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1622.106912][ T26] audit: type=1326 audit(1779396578.818:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.1.4031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1622.148719][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.195534][ T22] usb 4-1: config 0 descriptor?? [ 1622.642367][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 1622.649706][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 1622.677312][ T22] usb 4-1: USB disconnect, device number 105 [ 1623.632347][ T124] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1623.864827][ T124] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1623.916647][ T124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.943480][ T124] usb 1-1: config 0 has no interfaces? [ 1623.969656][ T124] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1623.984679][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.051916][ T124] usb 1-1: config 0 descriptor?? [ 1624.515873][T18989] lo speed is unknown, defaulting to 1000 [ 1625.442405][T18997] lo speed is unknown, defaulting to 1000 [ 1625.755281][T11144] usb 1-1: USB disconnect, device number 105 [ 1629.530481][ T124] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1629.750553][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 1629.764920][ T124] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.822325][ T124] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.867378][ T124] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1629.890539][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.295695][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1630.346526][ T124] mcp2221 0003:04D8:00DD.004A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1630.555089][ T124] usb 5-1: USB disconnect, device number 105 [ 1630.841519][ T6405] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1631.036199][ T6405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.078523][ T6405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.149331][ T6405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.203497][ T6405] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1631.233297][ T6405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.275312][ T6405] usb 3-1: config 0 descriptor?? [ 1631.369162][T19049] lo speed is unknown, defaulting to 1000 [ 1632.128144][ T6405] usbhid 3-1:0.0: can't add hid device: -71 [ 1632.146654][ T6405] usbhid: probe of 3-1:0.0 failed with error -71 [ 1632.191546][ T6405] usb 3-1: USB disconnect, device number 96 [ 1632.625541][T19062] lo speed is unknown, defaulting to 1000 [ 1633.520411][ T6405] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1634.075025][ T6405] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1634.108776][ T6405] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.142678][ T6405] usb 1-1: config 0 has no interfaces? [ 1634.155091][ T6405] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1634.181188][ T6405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.647437][ T6405] usb 1-1: config 0 descriptor?? [ 1636.378756][ T7] usb 1-1: USB disconnect, device number 106 [ 1636.630575][T13506] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1636.830534][T13506] usb 5-1: Using ep0 maxpacket: 16 [ 1636.837379][T13506] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.873032][T13506] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.917562][T13506] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1636.955264][T13506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.200287][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1637.562863][T13506] mcp2221 0003:04D8:00DD.004B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1638.030352][T13506] usb 5-1: USB disconnect, device number 106 [ 1639.250402][T13888] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1639.250493][ T4273] Bluetooth: hci4: command 0x1003 tx timeout [ 1639.290556][T13506] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1639.513831][T13506] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.581713][T13506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.714937][T13506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.845299][T13506] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1639.950139][T13506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.337513][T13506] usb 3-1: config 0 descriptor?? [ 1640.608758][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1640.617818][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1640.626835][T19117] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1640.637019][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1640.646051][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1640.655096][T19117] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1641.387661][T13506] usbhid 3-1:0.0: can't add hid device: -71 [ 1641.396319][T13506] usbhid: probe of 3-1:0.0 failed with error -71 [ 1641.546214][T13506] usb 3-1: USB disconnect, device number 97 [ 1641.745584][T19131] xt_SECMARK: invalid mode: 2 [ 1643.520386][T11144] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1643.732436][T11144] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1643.747435][T11144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.783413][T11144] usb 5-1: config 0 has no interfaces? [ 1643.805561][T11144] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1643.840827][T11144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.881045][T11144] usb 5-1: config 0 descriptor?? [ 1644.480622][T11144] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1644.670441][T11144] usb 2-1: Using ep0 maxpacket: 16 [ 1644.678194][T11144] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.755592][T11144] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.840618][T11144] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1644.920484][T11144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.211540][T13506] usb 5-1: USB disconnect, device number 107 [ 1645.366829][T11144] mcp2221 0003:04D8:00DD.004C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1645.513836][T19164] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4083'. [ 1645.559022][T13506] usb 2-1: USB disconnect, device number 107 [ 1645.786772][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1645.796020][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1645.805182][T19167] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1645.815309][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1645.824469][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1645.833464][T19167] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1647.320439][T13506] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1648.085795][T19192] ubi16: attaching mtd0 [ 1648.118174][T13506] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.119109][T19192] ubi16: scanning is finished [ 1648.133348][T19192] ubi16: empty MTD device detected [ 1648.160702][ T4317] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1648.198629][T13506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.210981][T13506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.260842][T13506] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1648.319647][T13506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.494757][T13506] usb 1-1: config 0 descriptor?? [ 1648.601297][T19192] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1648.609283][T19192] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1648.616846][T19192] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1648.624131][T19192] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 1648.632642][T19192] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1648.639660][T19192] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1648.647934][T19192] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1438639238 [ 1648.658216][T19192] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1648.708657][ T4317] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1648.720533][T19195] ubi16: background thread "ubi_bgt16d" started, PID 19195 [ 1648.728887][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.739145][ T4317] usb 4-1: config 0 has no interfaces? [ 1648.771187][ T4317] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1648.808245][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.818682][ T4317] usb 4-1: config 0 descriptor?? [ 1648.962109][T13506] usbhid 1-1:0.0: can't add hid device: -71 [ 1648.970039][T13506] usbhid: probe of 1-1:0.0 failed with error -71 [ 1648.998586][T13506] usb 1-1: USB disconnect, device number 107 [ 1649.357746][T19185] netlink: 'syz.1.4092': attribute type 10 has an invalid length. [ 1649.365888][T19185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1649.374890][T19185] device ipvlan1 entered promiscuous mode [ 1649.381118][T19185] bridge0: port 3(ipvlan1) entered blocking state [ 1649.387570][T19185] bridge0: port 3(ipvlan1) entered disabled state [ 1649.394828][T19185] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1650.264819][T19207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1650.274121][T19207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1650.283157][T19207] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1650.442840][ T4354] usb 4-1: USB disconnect, device number 106 [ 1651.338733][T19223] binder: 19219:19223 ioctl 4018620d 0 returned -22 [ 1652.498131][T19218] __nla_validate_parse: 3 callbacks suppressed [ 1652.498144][T19218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4101'. [ 1653.783475][ T4350] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1653.982145][ T4350] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.004037][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.037818][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.070540][ T4350] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1654.100136][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.137123][ T4350] usb 1-1: config 0 descriptor?? [ 1654.516057][ T5211] Bluetooth: hci4: Frame reassembly failed (-84) [ 1654.599414][ T4350] usbhid 1-1:0.0: can't add hid device: -71 [ 1654.628090][ T4350] usbhid: probe of 1-1:0.0 failed with error -71 [ 1654.635229][ T4317] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1654.747542][ T4350] usb 1-1: USB disconnect, device number 108 [ 1654.842607][ T4317] usb 5-1: config 0 has no interfaces? [ 1654.848610][ T4317] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1654.946091][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.068520][ T4317] usb 5-1: config 0 descriptor?? [ 1656.532261][T19109] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1656.539022][T14627] Bluetooth: hci4: command 0x1003 tx timeout [ 1657.318852][ T4317] usb 5-1: USB disconnect, device number 108 [ 1658.216250][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 1658.216380][ T26] audit: type=1326 audit(1779396616.238:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1660.001110][ T26] audit: type=1326 audit(1779396616.238:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1660.108085][ T26] audit: type=1326 audit(1779396616.238:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1660.615798][ T26] audit: type=1326 audit(1779396616.238:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1660.735556][ T26] audit: type=1326 audit(1779396616.248:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1660.805191][ T26] audit: type=1326 audit(1779396616.248:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1660.951572][ T26] audit: type=1326 audit(1779396616.248:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1660.991444][ T4317] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1661.123194][ T26] audit: type=1326 audit(1779396616.248:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1661.212941][ T4317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.258735][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.310634][ T26] audit: type=1326 audit(1779396616.248:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1661.328105][T19322] lo speed is unknown, defaulting to 1000 [ 1661.334829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1661.353182][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.407836][ T4317] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1661.486315][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.975855][ T4317] usb 3-1: config 0 descriptor?? [ 1662.029991][ T26] audit: type=1326 audit(1779396616.248:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.1.4116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1662.391093][ T4317] usbhid 3-1:0.0: can't add hid device: -71 [ 1662.399617][ T4317] usbhid: probe of 3-1:0.0 failed with error -71 [ 1662.446341][ T4317] usb 3-1: USB disconnect, device number 98 [ 1662.940382][ T4350] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1663.132006][ T4350] usb 2-1: config 0 has no interfaces? [ 1663.137784][ T4350] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1663.158608][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.199484][ T4350] usb 2-1: config 0 descriptor?? [ 1665.160003][T19357] binder: 19354:19357 ioctl 4018620d 0 returned -22 [ 1665.581382][T11144] usb 2-1: USB disconnect, device number 108 [ 1666.514842][T19370] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1667.030477][ T6405] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1667.506729][ T6405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.566665][ T6405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.589759][ T6405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.650730][ T6405] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1667.720543][ T6405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.581156][ T6405] usb 2-1: config 0 descriptor?? [ 1669.013232][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.019828][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.679498][ T6405] usbhid 2-1:0.0: can't add hid device: -71 [ 1669.688685][ T6405] usbhid: probe of 2-1:0.0 failed with error -71 [ 1669.727503][ T6405] usb 2-1: USB disconnect, device number 109 [ 1673.230044][ T6405] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1673.602697][T19419] lo speed is unknown, defaulting to 1000 [ 1673.615128][ T6405] usb 5-1: config 0 has no interfaces? [ 1673.621271][ T6405] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1673.688470][ T6405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.517758][ T6405] usb 5-1: config 0 descriptor?? [ 1674.660452][ T6405] usb 5-1: can't set config #0, error -71 [ 1674.741518][ T6405] usb 5-1: USB disconnect, device number 109 [ 1677.561293][T19456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4156'. [ 1679.950427][T11144] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1680.152760][T11144] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1680.173379][T11144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.620940][ T26] audit: type=1326 audit(1779396638.598:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1680.727777][ T26] audit: type=1326 audit(1779396638.598:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1680.786046][ T26] audit: type=1326 audit(1779396638.598:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1680.880466][T11144] usb 5-1: config 0 has no interfaces? [ 1680.965499][T11144] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1681.089093][T19498] lo speed is unknown, defaulting to 1000 [ 1681.101266][ T26] audit: type=1326 audit(1779396638.598:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1681.128407][T11144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.160680][ T26] audit: type=1326 audit(1779396638.598:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1681.179067][T11144] usb 5-1: config 0 descriptor?? [ 1681.203185][ T26] audit: type=1326 audit(1779396638.598:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1681.228768][ T26] audit: type=1326 audit(1779396638.598:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1682.454423][ T26] audit: type=1326 audit(1779396638.598:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1682.550753][ T26] audit: type=1326 audit(1779396638.598:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1682.588911][T11144] usb 5-1: can't set config #0, error -71 [ 1682.609285][T11144] usb 5-1: USB disconnect, device number 110 [ 1682.677880][ T26] audit: type=1326 audit(1779396638.598:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.2.4166" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1682.701922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1682.867379][T19510] binder: 19508:19510 ioctl 4018620d 0 returned -22 [ 1687.825485][T19537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1689.679238][T19556] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4182'. [ 1690.500529][ T6405] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1690.701911][ T6405] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1690.734319][ T6405] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.830004][ T6405] usb 5-1: config 0 has no interfaces? [ 1690.868811][ T6405] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1690.906738][T18315] libceph: connect (1)[c::]:6789 error -101 [ 1690.914105][T18315] libceph: mon0 (1)[c::]:6789 connect error [ 1690.943552][ T6405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.180658][T18315] libceph: connect (1)[c::]:6789 error -101 [ 1691.187424][T18315] libceph: mon0 (1)[c::]:6789 connect error [ 1691.205918][ T6405] usb 5-1: config 0 descriptor?? [ 1691.926406][T19570] ceph: No mds server is up or the cluster is laggy [ 1692.937629][T19586] binder: 19583:19586 ioctl 4018620d 0 returned -22 [ 1693.373700][T11144] usb 5-1: USB disconnect, device number 111 [ 1696.069825][T19622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4197'. [ 1698.853231][T19618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.860542][T19618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.200569][T18315] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1700.280374][ T6405] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1700.411880][T18315] usb 4-1: Using ep0 maxpacket: 32 [ 1700.421068][T18315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.474888][T18315] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1700.484189][T18315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.496889][T18315] usb 4-1: Product: syz [ 1700.501967][T18315] usb 4-1: Manufacturer: syz [ 1700.502379][ T6405] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1700.506729][T18315] usb 4-1: SerialNumber: syz [ 1700.530483][ T6405] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.555863][T18315] usb 4-1: config 0 descriptor?? [ 1700.570512][ T6405] usb 1-1: config 0 has no interfaces? [ 1700.580658][ T6405] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1700.591853][T18315] usb 4-1: bad CDC descriptors [ 1700.596857][T18315] usb 4-1: unsupported MDLM descriptors [ 1700.613019][ T6405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.652592][ T6405] usb 1-1: config 0 descriptor?? [ 1700.900912][ T4382] usb 4-1: USB disconnect, device number 107 [ 1700.929827][T19618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1700.977439][T19618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1701.315848][T19618] device ipvlan1 left promiscuous mode [ 1701.476138][T19618] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.496427][T19618] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.524234][T19618] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.544599][T19618] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.814835][T19644] lo speed is unknown, defaulting to 1000 [ 1701.952907][ T6405] usb 1-1: USB disconnect, device number 109 [ 1702.086849][T19666] ipt_ECN: cannot use operation on non-tcp rule [ 1703.289754][T19677] binder: 19671:19677 ioctl 4018620d 0 returned -22 [ 1704.580718][ T7] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1704.863968][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1704.908357][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.970513][ T7] usb 2-1: Product: syz [ 1704.974729][ T7] usb 2-1: Manufacturer: syz [ 1705.040017][ T7] usb 2-1: SerialNumber: syz [ 1705.108227][T19685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4215'. [ 1705.128004][T19685] device netdevsim0 entered promiscuous mode [ 1705.854927][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1705.896149][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1705.934526][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1705.985837][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1706.020470][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1706.090954][ T7] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1706.827608][ T7] usb 2-1: USB disconnect, device number 110 [ 1709.217235][T19717] binder: 19708:19717 ioctl 4018620d 0 returned -22 [ 1713.392424][T19745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.434422][T19745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.715726][T19745] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.725179][T19745] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.734274][T19745] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.743407][T19745] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.762561][T19745] device netdevsim0 left promiscuous mode [ 1713.965584][T19753] lo speed is unknown, defaulting to 1000 [ 1714.085509][T19777] binder: 19775:19777 ioctl 4018620d 0 returned -22 [ 1716.763260][T19803] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1716.827579][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4244'. [ 1716.861531][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4244'. [ 1719.263316][T19834] binder: 19829:19834 ioctl 4018620d 0 returned -22 [ 1722.582142][T19862] comedi comedi0: mpc624: I/O port conflict (0x100,16) [ 1722.594215][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 1722.594271][ T26] audit: type=1326 audit(1779396680.588:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1722.624624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1723.669552][ T26] audit: type=1326 audit(1779396680.588:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1723.774558][ T26] audit: type=1326 audit(1779396680.588:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1723.885188][ T26] audit: type=1326 audit(1779396680.588:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1723.978105][ T26] audit: type=1326 audit(1779396680.588:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1724.573351][T19872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4261'. [ 1724.722660][ T26] audit: type=1326 audit(1779396680.598:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1724.945145][ T26] audit: type=1326 audit(1779396680.598:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1725.050112][ T26] audit: type=1326 audit(1779396680.598:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1725.152694][ T26] audit: type=1326 audit(1779396680.598:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1725.676622][ T26] audit: type=1326 audit(1779396680.598:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.2.4257" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1726.077947][T19891] binder: 19884:19891 ioctl 4018620d 0 returned -22 [ 1728.070535][T13506] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1728.132772][T19916] fuse: Bad value for 'group_id' [ 1728.662218][T13506] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1728.699219][T13506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.809169][T13506] usb 5-1: config 0 has no interfaces? [ 1728.828368][T13506] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1728.858100][T13506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.887870][T13506] usb 5-1: config 0 descriptor?? [ 1730.908073][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.932878][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.995434][ T4317] usb 5-1: USB disconnect, device number 112 [ 1731.532554][T19957] binder: 19951:19957 ioctl 4018620d 0 returned -22 [ 1731.826535][T19954] lo speed is unknown, defaulting to 1000 [ 1733.526070][T19961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1734.798647][T19990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1734.817568][T19990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1734.842345][T19990] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1735.211521][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1737.250772][T14627] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1737.257487][T19109] Bluetooth: hci4: command 0x1003 tx timeout [ 1739.222818][T20022] binder: 20014:20022 ioctl 4018620d 0 returned -22 [ 1739.672682][T20027] lo speed is unknown, defaulting to 1000 [ 1743.340837][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1745.330432][T19109] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1745.330765][T14627] Bluetooth: hci4: command 0x1003 tx timeout [ 1745.824471][T20072] atomic_op ffff888029351198 conn xmit_atomic 0000000000000000 [ 1748.510452][ T4354] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1748.732354][ T4354] usb 3-1: Using ep0 maxpacket: 16 [ 1748.840382][ T4354] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.026598][ T4354] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1750.774149][ T4354] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1751.664666][ T4354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.744897][ T4354] usb 3-1: can't set config #128, error -71 [ 1751.811447][ T4354] usb 3-1: USB disconnect, device number 99 [ 1752.085082][T20121] lo speed is unknown, defaulting to 1000 [ 1755.290547][ T127] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1755.557649][ T127] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1755.570467][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.578957][ T127] usb 5-1: Product: syz [ 1755.586505][ T127] usb 5-1: Manufacturer: syz [ 1755.593193][ T127] usb 5-1: SerialNumber: syz [ 1755.667143][ T127] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1755.891091][ T127] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1756.279832][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 1756.279868][ T26] audit: type=1326 audit(1779396714.298:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1756.634261][ T4354] usb 5-1: USB disconnect, device number 113 [ 1756.944326][ T127] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1756.955066][ T127] ath9k_htc: Failed to initialize the device [ 1756.971609][ T26] audit: type=1326 audit(1779396714.298:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1756.976836][ T4354] usb 5-1: ath9k_htc: USB layer deinitialized [ 1757.065669][ T26] audit: type=1326 audit(1779396714.308:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1757.147714][T20163] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4333'. [ 1757.169251][ T26] audit: type=1326 audit(1779396714.308:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1757.384287][ T26] audit: type=1326 audit(1779396714.308:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1757.819728][ T26] audit: type=1326 audit(1779396714.308:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1757.987569][ T26] audit: type=1326 audit(1779396714.308:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1758.139349][ T26] audit: type=1326 audit(1779396714.308:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f541675d68e code=0x7ffc0000 [ 1758.336424][ T26] audit: type=1326 audit(1779396714.308:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f541679e157 code=0x7ffc0000 [ 1758.515768][ T26] audit: type=1326 audit(1779396714.308:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.3.4331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1759.680680][ T127] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1760.710519][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 1760.717648][ T127] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.729617][ T127] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1760.743472][ T127] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1760.753628][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.787896][ T127] usbhid 3-1:128.0: couldn't find an input interrupt endpoint [ 1763.003151][ T4354] usb 3-1: USB disconnect, device number 100 [ 1764.059101][T20228] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1765.396123][T20241] lo speed is unknown, defaulting to 1000 [ 1767.833763][T20275] lo speed is unknown, defaulting to 1000 [ 1772.200061][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4379'. [ 1772.212806][T20322] xt_TCPMSS: Only works on TCP SYN packets [ 1772.219633][T20322] tmpfs: Bad value for 'mpol' [ 1773.188625][T20334] netlink: 7080 bytes leftover after parsing attributes in process `syz.2.4385'. [ 1773.256690][T20334] input: syz1 as /devices/virtual/input/input184 [ 1773.385867][ T4259] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1773.424677][T11144] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1773.580185][ T4259] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1773.594054][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.616547][ T4259] usb 2-1: Product: syz [ 1773.626243][T11144] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1773.634963][T11144] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.645851][ T4259] usb 2-1: Manufacturer: syz [ 1773.650705][ T4259] usb 2-1: SerialNumber: syz [ 1773.655410][T11144] usb 1-1: config 0 has no interfaces? [ 1773.680032][ T4259] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1773.690696][T11144] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1773.717806][T11144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.731318][T11144] usb 1-1: config 0 descriptor?? [ 1773.745597][ T4259] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1773.953791][T11144] usb 2-1: USB disconnect, device number 111 [ 1774.770439][ T4259] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1774.786988][ T4259] ath9k_htc: Failed to initialize the device [ 1774.796896][T11144] usb 2-1: ath9k_htc: USB layer deinitialized [ 1775.075493][T11144] usb 1-1: USB disconnect, device number 110 [ 1778.153060][T20385] netlink: 7080 bytes leftover after parsing attributes in process `syz.0.4397'. [ 1778.258483][T20389] input: syz1 as /devices/virtual/input/input185 [ 1779.942415][T11144] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1781.400377][ T4259] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1781.574909][T11144] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 1781.590566][ T4259] usb 1-1: Using ep0 maxpacket: 16 [ 1781.610994][T11144] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.621919][ T4259] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.634841][ T4259] usb 1-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1781.648515][T11144] usb 2-1: config 0 has no interfaces? [ 1781.660410][T11144] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1781.669962][T11144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.712478][T20428] lo speed is unknown, defaulting to 1000 [ 1781.815284][ T4259] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1781.832183][T11144] usb 2-1: config 0 descriptor?? [ 1781.843253][ T4259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.859533][ T4259] usbhid 1-1:128.0: couldn't find an input interrupt endpoint [ 1782.610382][ T4259] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1783.091221][ T4259] usb 4-1: device descriptor read/64, error -71 [ 1783.470835][ T4259] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1783.630886][ T4259] usb 4-1: device descriptor read/64, error -71 [ 1783.643143][ T127] usb 2-1: USB disconnect, device number 112 [ 1783.760628][ T4259] usb usb4-port1: attempt power cycle [ 1784.123730][ T127] usb 1-1: USB disconnect, device number 111 [ 1784.204273][ T4259] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1784.251068][ T4259] usb 4-1: device descriptor read/8, error -71 [ 1784.851885][ T4259] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1784.954347][ T4259] usb 4-1: device descriptor read/8, error -71 [ 1785.781794][ T4259] usb usb4-port1: unable to enumerate USB device [ 1786.043095][T20478] fuse: Unknown parameter 'group_id00000000000000000000' [ 1787.152602][T20488] lo speed is unknown, defaulting to 1000 [ 1788.390555][ T127] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1788.601218][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 1788.613170][ T127] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.644104][ T127] usb 1-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1788.670465][ T127] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1788.679556][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.715387][ T127] usbhid 1-1:128.0: couldn't find an input interrupt endpoint [ 1789.737867][T20522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4429'. [ 1791.540102][ T127] usb 1-1: USB disconnect, device number 112 [ 1791.543907][T20537] fuse: Unknown parameter 'group_id00000000000000000000' [ 1791.952591][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.959022][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.030624][ T4317] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1792.350521][ T4317] usb 4-1: device descriptor read/64, error -71 [ 1792.650434][ T4317] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1792.788436][T20556] lo speed is unknown, defaulting to 1000 [ 1792.820354][ T4317] usb 4-1: device descriptor read/64, error -71 [ 1792.974924][ T4317] usb usb4-port1: attempt power cycle [ 1793.420534][ T4317] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1793.434196][T20567] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1793.445311][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1793.454613][T20567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1793.465942][ T4317] usb 4-1: device descriptor read/8, error -71 [ 1793.830350][ T4317] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1793.881353][ T4317] usb 4-1: device descriptor read/8, error -71 [ 1794.091285][ T4317] usb usb4-port1: unable to enumerate USB device [ 1794.112691][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1794.121990][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1794.131209][T20576] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1794.141414][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1794.150686][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1794.159674][T20576] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1795.879296][T20591] netlink: 7080 bytes leftover after parsing attributes in process `syz.0.4447'. [ 1795.925078][T20591] input: syz1 as /devices/virtual/input/input186 [ 1796.110339][ T127] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1796.310345][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 1796.317698][ T127] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.359512][ T127] usb 5-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1796.430987][ T127] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1796.440572][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.509271][ T127] usbhid 5-1:128.0: couldn't find an input interrupt endpoint [ 1796.801687][T20595] fuse: Unknown parameter 'group_id00000000000000000000' [ 1797.777361][T20612] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1797.839960][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4452'. [ 1797.856012][T20612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4452'. [ 1798.200806][ T127] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1798.331621][T11144] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1798.468988][ T127] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1798.492384][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.510736][ T127] usb 4-1: config 0 has no interfaces? [ 1798.518689][ T127] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1798.549617][T11144] usb 1-1: device descriptor read/64, error -71 [ 1798.562359][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.751491][ T127] usb 4-1: config 0 descriptor?? [ 1798.999858][T11144] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1799.104758][ T127] usb 5-1: USB disconnect, device number 114 [ 1799.210164][T11144] usb 1-1: device descriptor read/64, error -71 [ 1799.691369][T11144] usb usb1-port1: attempt power cycle [ 1800.420382][T11144] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1800.461145][T11144] usb 1-1: device descriptor read/8, error -71 [ 1800.744208][T11144] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1800.806784][T20653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4462'. [ 1801.166526][ T4259] usb 4-1: USB disconnect, device number 116 [ 1801.266998][T11144] usb 1-1: device descriptor read/8, error -71 [ 1801.447085][T11144] usb usb1-port1: unable to enumerate USB device [ 1805.730601][T20699] lo speed is unknown, defaulting to 1000 [ 1807.380544][ T7] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1807.594066][ T7] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1807.626431][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.689822][ T7] usb 4-1: config 0 has no interfaces? [ 1807.739903][ T7] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1807.780443][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.800990][ T7] usb 4-1: config 0 descriptor?? [ 1808.850368][ T4317] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1809.040543][ T4317] usb 1-1: device descriptor read/64, error -71 [ 1809.547215][ T4317] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1809.740451][ T4317] usb 1-1: device descriptor read/64, error -71 [ 1809.880595][ T4317] usb usb1-port1: attempt power cycle [ 1810.300399][ T4317] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1810.338687][ T4259] usb 4-1: USB disconnect, device number 117 [ 1810.350922][ T4317] usb 1-1: device descriptor read/8, error -71 [ 1810.630818][ T4317] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1810.939141][ T4317] usb 1-1: device not accepting address 120, error -71 [ 1810.961276][ T4317] usb usb1-port1: unable to enumerate USB device [ 1812.303625][T20760] lo speed is unknown, defaulting to 1000 [ 1812.586600][T20766] lo speed is unknown, defaulting to 1000 [ 1815.312297][T20772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4490'. [ 1816.050455][ T4259] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1816.530518][ T4259] usb 2-1: device descriptor read/64, error -71 [ 1817.392019][ T4259] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1817.584630][T11144] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1817.592656][ T4259] usb 2-1: device descriptor read/64, error -71 [ 1817.791696][ T4259] usb usb2-port1: attempt power cycle [ 1818.234654][T11144] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1818.246771][T11144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.266104][T11144] usb 5-1: config 0 has no interfaces? [ 1818.273611][T11144] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1818.303292][T11144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.327944][T11144] usb 5-1: config 0 descriptor?? [ 1818.358445][T20826] xt_TCPMSS: Only works on TCP SYN packets [ 1818.392344][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4502'. [ 1818.403999][T20825] tmpfs: Bad value for 'mpol' [ 1819.578518][ T127] usb 5-1: USB disconnect, device number 115 [ 1823.072886][T20848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4508'. [ 1823.494760][ T4259] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1823.832977][ T4259] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1823.847938][ T4259] usb 1-1: can't read configurations, error -61 [ 1824.190492][ T4259] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 1824.442388][ T4259] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1824.470387][ T4259] usb 1-1: can't read configurations, error -61 [ 1824.492364][ T4259] usb usb1-port1: attempt power cycle [ 1825.890486][ T4259] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1826.196772][ T4259] usb 1-1: device descriptor read/all, error -71 [ 1826.382785][T20899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4519'. [ 1828.759060][T20917] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4523'. [ 1830.230390][ T4317] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1830.420408][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 1830.429039][ T4317] usb 4-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1830.458002][ T4317] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1830.473115][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.502524][ T4317] usbhid 4-1:128.0: couldn't find an input interrupt endpoint [ 1830.630557][ T127] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1830.667524][T20943] lo speed is unknown, defaulting to 1000 [ 1830.844600][ T127] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1830.852873][ T127] usb 1-1: can't read configurations, error -61 [ 1831.151413][ T127] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1832.709131][ T127] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1832.716981][ T127] usb 1-1: can't read configurations, error -61 [ 1832.732421][ T127] usb usb1-port1: attempt power cycle [ 1833.507806][ T127] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1833.543382][ T127] usb 1-1: device descriptor read/8, error -71 [ 1834.220031][ T4317] usb 4-1: USB disconnect, device number 118 [ 1834.241922][T19774] libceph: connect (1)[c::]:6789 error -101 [ 1834.250487][T19774] libceph: mon0 (1)[c::]:6789 connect error [ 1835.059809][T20975] ceph: No mds server is up or the cluster is laggy [ 1835.069518][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 1835.095959][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 1835.980564][ T127] libceph: connect (1)[c::]:6789 error -101 [ 1835.987559][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 1836.117891][T20997] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1836.252080][T21002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4543'. [ 1838.058297][T21010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4545'. [ 1838.697185][ T4259] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1839.680655][ T4259] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1839.717125][ T4259] usb 1-1: can't read configurations, error -61 [ 1839.880571][ T4259] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1840.432666][ T4259] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1842.051823][T14627] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1842.058313][T19109] Bluetooth: hci4: command 0x1003 tx timeout [ 1842.413534][ T4259] usb 1-1: can't read configurations, error -61 [ 1843.137971][ T4259] usb usb1-port1: attempt power cycle [ 1844.404401][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1844.413899][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1844.423206][T21062] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1844.433012][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1844.442256][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1844.451328][T21062] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1844.601289][T21067] input: syz1 as /devices/virtual/input/input187 [ 1846.013535][T21074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1848.080657][T21102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4568'. [ 1848.200349][ T127] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1848.415333][ T127] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1848.430492][ T127] usb 1-1: can't read configurations, error -61 [ 1848.716607][ T127] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1849.612312][ T127] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1849.630362][ T127] usb 1-1: can't read configurations, error -61 [ 1849.636877][ T127] usb usb1-port1: attempt power cycle [ 1850.060466][ T127] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1850.192930][ T127] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1850.338782][ T4259] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1850.540436][ T4259] usb 2-1: Using ep0 maxpacket: 16 [ 1850.552938][ T4259] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.933613][ T4259] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1850.934566][ T127] usb 1-1: can't read configurations, error -61 [ 1850.979736][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.037517][ T4259] usbhid 2-1:128.0: couldn't find an input interrupt endpoint [ 1851.186998][T21124] lo speed is unknown, defaulting to 1000 [ 1851.326986][T21132] input: syz1 as /devices/virtual/input/input188 [ 1852.408762][T21141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4577'. [ 1853.179831][T21152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4579'. [ 1853.324543][ T127] usb 2-1: USB disconnect, device number 116 [ 1853.332229][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.332271][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.940415][ T127] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1856.032894][ T127] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1856.051573][ T127] usb 2-1: can't read configurations, error -61 [ 1856.200518][ T127] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1856.542661][ T127] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1856.550574][ T127] usb 2-1: can't read configurations, error -61 [ 1856.560922][ T127] usb usb2-port1: attempt power cycle [ 1856.970428][ T127] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1857.000383][T21197] fuse: Bad value for 'fd' [ 1857.013265][ T127] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1857.027884][ T127] usb 2-1: can't read configurations, error -61 [ 1857.220394][ T127] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1857.285789][ T127] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1857.297825][ T127] usb 2-1: can't read configurations, error -61 [ 1857.325606][ T127] usb usb2-port1: unable to enumerate USB device [ 1857.650470][ T127] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1857.850472][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 1857.862836][ T127] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.927443][ T127] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1857.936992][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.249489][ T127] usbhid 1-1:128.0: couldn't find an input interrupt endpoint [ 1858.469202][T21206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4593'. [ 1858.803653][ T14] kworker/dying (14) used greatest stack depth: 19984 bytes left [ 1860.712778][ T127] libceph: connect (1)[c::]:6789 error -101 [ 1860.719028][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 1860.991670][ T127] libceph: connect (1)[c::]:6789 error -101 [ 1861.513014][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 1861.538476][T21223] ceph: No mds server is up or the cluster is laggy [ 1861.613616][T19774] usb 1-1: USB disconnect, device number 10 [ 1863.200522][ T6405] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1863.728352][ T6405] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1863.756428][ T6405] usb 1-1: can't read configurations, error -61 [ 1864.032243][ T6405] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1865.571686][ T6405] usb 1-1: device descriptor read/all, error -71 [ 1865.580856][ T6405] usb usb1-port1: attempt power cycle [ 1865.667350][T21264] lo speed is unknown, defaulting to 1000 [ 1866.060435][T21270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4609'. [ 1866.498889][T21274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4610'. [ 1867.175718][ T6405] libceph: connect (1)[c::]:6789 error -101 [ 1867.207874][ T6405] libceph: mon0 (1)[c::]:6789 connect error [ 1867.380244][T21281] lo speed is unknown, defaulting to 1000 [ 1867.630750][ T6405] libceph: connect (1)[c::]:6789 error -101 [ 1867.644424][ T6405] libceph: mon0 (1)[c::]:6789 connect error [ 1867.824023][T21283] ceph: No mds server is up or the cluster is laggy [ 1869.036787][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1869.043419][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1871.330396][T19109] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1871.330423][T14627] Bluetooth: hci4: command 0x1003 tx timeout [ 1872.365753][T21311] xt_TCPMSS: Only works on TCP SYN packets [ 1872.436651][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1872.448576][T21310] tmpfs: Bad value for 'mpol' [ 1874.770574][ T6405] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1875.002677][ T6405] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 1875.034823][ T6405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.066738][ T6405] usb 3-1: config 0 has no interfaces? [ 1875.085647][ T6405] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1875.149144][ T6405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.168808][T21330] lo speed is unknown, defaulting to 1000 [ 1875.206105][ T6405] usb 3-1: config 0 descriptor?? [ 1875.779895][T21336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4623'. [ 1876.572232][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4620'. [ 1877.046098][T19774] usb 3-1: USB disconnect, device number 101 [ 1878.460702][T21356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1878.472792][T21356] xt_TCPMSS: Only works on TCP SYN packets [ 1878.479433][T21356] tmpfs: Bad value for 'mpol' [ 1880.509561][T21369] lo speed is unknown, defaulting to 1000 [ 1881.497846][T21379] lo speed is unknown, defaulting to 1000 [ 1882.223223][T21385] fuse: Unknown parameter '00000000000000000000' [ 1884.977596][T21404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4640'. [ 1886.162428][ T6405] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1886.328325][T21416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1886.337451][T21416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1886.346641][T21416] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1886.357272][T21416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1886.366339][T21416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1886.375429][T21416] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1886.387596][ T6405] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 1886.396214][ T6405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.407650][ T6405] usb 3-1: config 0 has no interfaces? [ 1886.414322][ T6405] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1886.638877][ T6405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.669427][ T6405] usb 3-1: config 0 descriptor?? [ 1887.064854][ T6405] usb 3-1: can't set config #0, error -71 [ 1887.073045][ T6405] usb 3-1: USB disconnect, device number 102 [ 1890.158414][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4641'. [ 1890.177912][T21427] xt_TCPMSS: Only works on TCP SYN packets [ 1890.186887][T21427] tmpfs: Bad value for 'mpol' [ 1890.337918][T21431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4648'. [ 1890.850807][T19109] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1891.165668][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1891.165776][ T26] audit: type=1326 audit(1779396849.178:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1891.203594][ T26] audit: type=1326 audit(1779396849.178:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1891.706567][ T26] audit: type=1326 audit(1779396849.188:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1891.737557][ T26] audit: type=1326 audit(1779396849.188:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1892.977597][ T26] audit: type=1326 audit(1779396849.188:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1893.004317][ T26] audit: type=1326 audit(1779396849.188:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1893.029731][ T26] audit: type=1326 audit(1779396849.188:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1893.156912][ T26] audit: type=1326 audit(1779396849.188:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feafe35d68e code=0x7ffc0000 [ 1894.414191][ T26] audit: type=1326 audit(1779396849.188:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7feafe39e157 code=0x7ffc0000 [ 1895.000523][ T26] audit: type=1326 audit(1779396849.198:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21434 comm="syz.2.4649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1897.660421][T19774] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1898.189934][ T6704] Bluetooth: hci4: Frame reassembly failed (-84) [ 1900.099251][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'. [ 1900.224875][T19109] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1900.231606][T14627] Bluetooth: hci4: command 0x1003 tx timeout [ 1903.936057][T21491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1904.619635][T21509] netlink: 'syz.4.4668': attribute type 2 has an invalid length. [ 1905.130436][ T6405] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1905.320670][ T6405] usb 4-1: Using ep0 maxpacket: 32 [ 1905.328269][ T6405] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1905.372721][ T6405] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1905.411159][ T6405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.420211][ T6405] usb 4-1: Product: syz [ 1905.459797][ T6405] usb 4-1: Manufacturer: syz [ 1905.472206][ T6405] usb 4-1: SerialNumber: syz [ 1905.592846][T21520] fuse: Unknown parameter '00000000000000000000' [ 1905.740197][ T6405] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 1906.217891][ T6405] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1906.271659][T21514] udevd[21514]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1906.297282][ T6405] usb 4-1: USB disconnect, device number 119 [ 1910.211786][T14627] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1910.218378][T19109] Bluetooth: hci4: command 0x1003 tx timeout [ 1911.970655][ T6405] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1911.972481][T21564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4678'. [ 1912.191079][T21561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4680'. [ 1912.502742][T21566] lo speed is unknown, defaulting to 1000 [ 1912.652217][ T6405] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 1912.674185][ T6405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.731857][ T6405] usb 2-1: config 0 has no interfaces? [ 1912.737411][ T6405] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1912.747016][ T6405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.757975][ T6405] usb 2-1: config 0 descriptor?? [ 1912.798424][ T6405] usb 2-1: can't set config #0, error -71 [ 1912.821955][ T6405] usb 2-1: USB disconnect, device number 121 [ 1914.771870][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.778296][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.230429][T21584] Bluetooth: MGMT ver 1.22 [ 1916.510535][T21584] trusted_key: encrypted_key: insufficient parameters specified [ 1918.256304][ T6405] libceph: connect (1)[c::]:6789 error -101 [ 1918.263072][ T6405] libceph: mon0 (1)[c::]:6789 connect error [ 1918.351674][ T6405] libceph: connect (1)[c::]:6789 error -101 [ 1918.357918][ T6405] libceph: mon0 (1)[c::]:6789 connect error [ 1918.533052][T21604] ceph: No mds server is up or the cluster is laggy [ 1918.643589][ T6405] libceph: connect (1)[c::]:6789 error -101 [ 1918.715033][ T6405] libceph: mon0 (1)[c::]:6789 connect error [ 1919.060233][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1919.068708][ T26] audit: type=1326 audit(1779396877.038:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1919.946727][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4694'. [ 1919.962152][T21622] xt_TCPMSS: Only works on TCP SYN packets [ 1919.972304][T21622] tmpfs: Bad value for 'mpol' [ 1920.113332][ T26] audit: type=1326 audit(1779396877.048:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1920.138309][ T26] audit: type=1326 audit(1779396877.048:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1920.162760][ T26] audit: type=1326 audit(1779396877.048:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1920.187149][ T26] audit: type=1326 audit(1779396877.048:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1920.211574][ T26] audit: type=1326 audit(1779396877.058:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1920.236335][ T26] audit: type=1326 audit(1779396877.068:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1920.360613][ T26] audit: type=1326 audit(1779396877.068:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feafe35d68e code=0x7ffc0000 [ 1922.495126][ T26] audit: type=1326 audit(1779396877.078:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7feafe39e157 code=0x7ffc0000 [ 1922.520094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1922.882278][ T26] audit: type=1326 audit(1779396877.078:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21616 comm="syz.2.4693" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1922.907006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1923.010478][T19109] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1923.010524][T14627] Bluetooth: hci4: command 0x1003 tx timeout [ 1924.141643][T21645] lo speed is unknown, defaulting to 1000 [ 1925.554004][T21660] lo speed is unknown, defaulting to 1000 [ 1927.130475][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1927.130538][ T26] audit: type=1326 audit(1779396885.148:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.1.4705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1927.371285][ T26] audit: type=1326 audit(1779396885.148:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.1.4705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1927.403348][ T26] audit: type=1326 audit(1779396885.148:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.1.4705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1928.033518][ T26] audit: type=1326 audit(1779396885.148:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.1.4705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1928.146839][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4706'. [ 1928.163165][T21680] xt_TCPMSS: Only works on TCP SYN packets [ 1928.173561][T21680] tmpfs: Bad value for 'mpol' [ 1928.978828][ T26] audit: type=1326 audit(1779396885.148:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.1.4705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1929.003103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1929.062800][ T26] audit: type=1326 audit(1779396885.148:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.1.4705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1929.087443][ T26] audit: type=1326 audit(1779396885.228:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.1.4705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1929.191388][ T26] audit: type=1326 audit(1779396885.238:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.1.4705" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 1929.712964][T21684] input: syz1 as /devices/virtual/input/input189 [ 1930.025812][T21689] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1930.047319][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4710'. [ 1930.056644][T21689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4710'. [ 1930.215168][ T4378] Bluetooth: hci4: Frame reassembly failed (-84) [ 1932.292196][T19109] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1932.292262][T14627] Bluetooth: hci4: command 0x1003 tx timeout [ 1933.276872][T21709] lo speed is unknown, defaulting to 1000 [ 1936.717089][T21739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4719'. [ 1936.733944][T21739] xt_TCPMSS: Only works on TCP SYN packets [ 1936.746518][T21739] tmpfs: Bad value for 'mpol' [ 1937.676584][T21750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4724'. [ 1938.177295][T21754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4725'. [ 1938.780822][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1940.850457][T19109] Bluetooth: hci4: command 0x1003 tx timeout [ 1940.857103][T14627] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1944.812975][T21787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1944.822217][T21787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1944.839087][T21787] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1945.012665][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4736'. [ 1945.028980][T21794] xt_TCPMSS: Only works on TCP SYN packets [ 1945.038797][T21794] tmpfs: Bad value for 'mpol' [ 1946.542145][T21801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1946.551447][T21801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1946.560530][T21801] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1946.571019][T21801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1946.580051][T21801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1946.589287][T21801] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1949.162313][ T5729] Bluetooth: hci4: Frame reassembly failed (-84) [ 1951.170503][T13888] Bluetooth: hci4: command 0x1003 tx timeout [ 1951.179346][T21768] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1952.425548][T21835] lo speed is unknown, defaulting to 1000 [ 1953.398964][T21846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1953.408287][T21846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1953.418104][T21846] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1953.428932][T21846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1953.438122][T21846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1953.447315][T21846] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1955.615864][T21873] lo speed is unknown, defaulting to 1000 [ 1958.529715][T21894] lo speed is unknown, defaulting to 1000 [ 1960.960353][T21913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1960.969443][T21913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1960.978466][T21913] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1960.987447][T21914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1960.996511][T21914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1961.005505][T21914] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1961.931521][T21915] IPVS: stopping master sync thread 17650 ... [ 1966.823447][ T26] audit: type=1326 audit(1779396924.808:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1968.238124][ T26] audit: type=1326 audit(1779396924.818:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1968.262294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.354326][ T26] audit: type=1326 audit(1779396924.818:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1969.650873][ T26] audit: type=1326 audit(1779396924.818:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1969.677855][ T26] audit: type=1326 audit(1779396924.828:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1970.099298][ T26] audit: type=1326 audit(1779396924.828:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1970.147183][T21973] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1970.150702][ T26] audit: type=1326 audit(1779396924.828:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1970.202436][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1970.222133][T21973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1970.224764][ T26] audit: type=1326 audit(1779396924.828:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1970.556864][ T26] audit: type=1326 audit(1779396924.838:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541679ce59 code=0x7ffc0000 [ 1970.696186][ T26] audit: type=1326 audit(1779396924.838:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21953 comm="syz.3.4778" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f541675d68e code=0x7ffc0000 [ 1971.570308][T21990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4788'. [ 1974.858846][T22020] lo speed is unknown, defaulting to 1000 [ 1975.365385][ T124] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1975.611022][ T124] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1975.619338][ T124] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.766739][ T124] usb 4-1: config 0 has no interfaces? [ 1975.773819][ T124] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1975.818428][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.869204][ T124] usb 4-1: config 0 descriptor?? [ 1976.230825][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.237268][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.366251][T22036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1976.375396][T22036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1976.384502][T22036] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1976.394986][T22036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1976.404155][T22036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1976.413202][T22036] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1976.926129][T22037] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1976.967318][ T124] libceph: connect (1)[c::]:6789 error -101 [ 1976.967530][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1976.983575][T22037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1976.983663][ T124] libceph: mon0 (1)[c::]:6789 connect error [ 1977.302980][T22040] ceph: No mds server is up or the cluster is laggy [ 1977.424522][T13506] usb 4-1: USB disconnect, device number 120 [ 1979.291740][T22066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1982.036537][T22078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4794'. [ 1982.616290][T22090] lo speed is unknown, defaulting to 1000 [ 1983.280810][T22098] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1983.316488][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1983.346257][T22098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1985.019358][ T124] libceph: connect (1)[c::]:6789 error -101 [ 1985.075088][ T124] libceph: mon0 (1)[c::]:6789 connect error [ 1985.175513][ T4354] libceph: connect (1)[c::]:6789 error -101 [ 1985.210500][ T4354] libceph: mon0 (1)[c::]:6789 connect error [ 1985.480355][ T127] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1985.514482][ T4354] libceph: connect (1)[c::]:6789 error -101 [ 1985.535201][ T4354] libceph: mon0 (1)[c::]:6789 connect error [ 1985.691207][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 1985.705955][ T127] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1985.730445][ T127] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1985.741717][ T127] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1985.753520][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.842013][T22113] ceph: No mds server is up or the cluster is laggy [ 1987.050343][ T4354] libceph: connect (1)[c::]:6789 error -101 [ 1987.081682][ T4354] libceph: mon0 (1)[c::]:6789 connect error [ 1987.260991][ T127] mcp2221 0003:04D8:00DD.004D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1987.467282][ T127] usb 5-1: USB disconnect, device number 116 [ 1987.810570][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1987.810613][ T26] audit: type=1326 audit(1779396945.588:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1988.197189][T22136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4818'. [ 1988.297936][ T26] audit: type=1326 audit(1779396945.588:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1988.410441][ T26] audit: type=1326 audit(1779396945.598:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1988.495878][ T26] audit: type=1326 audit(1779396945.598:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1989.130366][ T26] audit: type=1326 audit(1779396945.598:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1989.185725][ T26] audit: type=1326 audit(1779396945.598:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1989.226789][T22146] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1989.316287][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4821'. [ 1989.378415][T22146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4821'. [ 1989.466504][ T26] audit: type=1326 audit(1779396945.598:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1989.611491][ T26] audit: type=1326 audit(1779396945.598:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1990.422721][ T26] audit: type=1326 audit(1779396945.598:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 1991.972085][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4825'. [ 1991.989284][T22155] xt_TCPMSS: Only works on TCP SYN packets [ 1991.996317][T22155] tmpfs: Bad value for 'mpol' [ 1992.113899][ T26] audit: type=1326 audit(1779396945.598:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.2.4817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feafe35d68e code=0x7ffc0000 [ 1995.199574][T22186] fuse: Unknown parameter 'user_id00000000000000000000' [ 1995.204685][T22183] lo speed is unknown, defaulting to 1000 [ 1998.419752][T22205] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1998.497956][T22210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4835'. [ 1998.552016][T22210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4835'. [ 2001.264028][T22234] fuse: Bad value for 'fd' [ 2001.643935][T22241] input: syz1 as /devices/virtual/input/input190 [ 2009.492016][T22284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4856'. [ 2011.293179][T22299] fuse: Bad value for 'fd' [ 2013.948653][T22318] lo speed is unknown, defaulting to 1000 [ 2016.129891][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 2016.129907][ T26] audit: type=1326 audit(1779396973.528:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2016.275621][T22339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4870'. [ 2016.601432][ T26] audit: type=1326 audit(1779396973.528:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2017.033033][ T26] audit: type=1326 audit(1779396973.528:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2017.072170][ T26] audit: type=1326 audit(1779396973.528:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2017.099742][ T26] audit: type=1326 audit(1779396973.528:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2017.276152][ T26] audit: type=1326 audit(1779396973.528:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2017.874529][ T26] audit: type=1326 audit(1779396973.528:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2019.024061][ T26] audit: type=1326 audit(1779396973.528:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2019.210391][ T26] audit: type=1326 audit(1779396973.538:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2019.296680][T22367] fuse: Bad value for 'fd' [ 2019.447115][ T26] audit: type=1326 audit(1779396973.538:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.2.4868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feafe35d68e code=0x7ffc0000 [ 2021.267055][T22385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4883'. [ 2026.450365][T21768] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2029.091481][T22432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4895'. [ 2031.798749][T22454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4894'. [ 2034.039392][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 2034.039426][ T26] audit: type=1326 audit(1779396992.058:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2034.681885][ T26] audit: type=1326 audit(1779396992.058:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2034.735163][ T26] audit: type=1326 audit(1779396992.058:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2034.772057][ T26] audit: type=1326 audit(1779396992.058:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2034.885005][ T26] audit: type=1326 audit(1779396992.058:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2034.910420][ T26] audit: type=1326 audit(1779396992.058:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2036.498757][ T26] audit: type=1326 audit(1779396992.058:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2037.741420][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.747844][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.755911][ T26] audit: type=1326 audit(1779396992.058:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2037.805274][ T26] audit: type=1326 audit(1779396992.068:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020c19ce59 code=0x7ffc0000 [ 2038.061173][T22492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4907'. [ 2038.438043][ T26] audit: type=1326 audit(1779396992.068:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.1.4904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f020c15d68e code=0x7ffc0000 [ 2041.275969][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 2041.276257][ T26] audit: type=1326 audit(1779396999.288:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2041.424967][ T26] audit: type=1326 audit(1779396999.288:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2041.870070][ T26] audit: type=1326 audit(1779396999.288:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2041.901801][ T26] audit: type=1326 audit(1779396999.288:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2041.926643][ T26] audit: type=1326 audit(1779396999.298:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2041.951430][ T26] audit: type=1326 audit(1779396999.298:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2042.082553][ T26] audit: type=1326 audit(1779396999.298:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2043.391414][ T26] audit: type=1326 audit(1779396999.298:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2043.417488][ T26] audit: type=1326 audit(1779396999.298:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feafe39ce59 code=0x7ffc0000 [ 2043.443359][ T26] audit: type=1326 audit(1779396999.298:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22517 comm="syz.2.4916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feafe35d68e code=0x7ffc0000 [ 2043.544909][T22533] netlink: 'syz.2.4922': attribute type 2 has an invalid length. [ 2043.570440][T22533] ------------[ cut here ]------------ [ 2043.575993][T22533] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 2043.618297][T22533] WARNING: CPU: 0 PID: 22533 at net/sched/cls_u32.c:853 u32_change+0x1dfc/0x27e0 [ 2043.627712][T22533] Modules linked in: [ 2043.631827][T22533] CPU: 0 PID: 22533 Comm: syz.2.4922 Not tainted syzkaller #0 [ 2043.639299][T22533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2043.649444][T22533] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 2043.654799][T22533] Code: f9 eb 59 e8 b6 88 1e f9 c6 05 31 97 a7 05 01 b9 10 00 00 00 48 c7 c7 a0 ac 8e 8b 4c 89 fe 48 c7 c2 20 ad 8e 8b e8 14 f7 e9 f8 <0f> 0b e9 ff ee ff ff e8 88 88 1e f9 eb 24 e8 81 88 1e f9 c6 05 a3 [ 2043.674865][T22533] RSP: 0018:ffffc90006446e40 EFLAGS: 00010246 [ 2043.681095][T22533] RAX: b61b7d8a42f1fc00 RBX: ffff88807a0960e0 RCX: 0000000000080000 [ 2043.689277][T22533] RDX: ffffc9001e005000 RSI: 0000000000007f1b RDI: 0000000000007f1c [ 2043.697359][T22533] RBP: ffffc90006446ff8 R08: ffffc90006446ac7 R09: 1ffff92000c88d58 [ 2043.705444][T22533] R10: dffffc0000000000 R11: fffff52000c88d59 R12: 0000000000000000 [ 2043.713514][T22533] R13: dffffc0000000000 R14: ffff888047bcd000 R15: 0000000000000020 [ 2043.721585][T22533] FS: 00007feaff2d66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2043.730623][T22533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2043.737236][T22533] CR2: 00002000000000c0 CR3: 000000002f945000 CR4: 00000000003506f0 [ 2043.745457][T22533] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2043.753542][T22533] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2043.761630][T22533] Call Trace: [ 2043.764947][T22533] [ 2043.767917][T22533] ? u32_get+0x370/0x370 [ 2043.772332][T22533] ? u32_get+0x370/0x370 [ 2043.776609][T22533] tc_new_tfilter+0x1160/0x1900 [ 2043.781620][T22533] ? tcf_proto_signal_destroying+0x240/0x240 [ 2043.787712][T22533] ? rcu_read_unlock+0x8c/0xa0 [ 2043.792610][T22533] ? tcf_proto_signal_destroying+0x240/0x240 [ 2043.798594][T22533] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2043.803794][T22533] ? tcf_proto_signal_destroying+0x240/0x240 [ 2043.809933][T22533] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 2043.815048][T22533] ? rtnetlink_bind+0x80/0x80 [ 2043.819738][T22533] ? mark_lock+0x94/0x320 [ 2043.824143][T22533] ? __lock_acquire+0x12f4/0x7d10 [ 2043.829199][T22533] ? verify_lock_unused+0x140/0x140 [ 2043.834451][T22533] ? netlink_sendmsg+0x654/0xbd0 [ 2043.839464][T22533] ? verify_lock_unused+0x140/0x140 [ 2043.844711][T22533] netlink_rcv_skb+0x1fb/0x450 [ 2043.849743][T22533] ? rtnetlink_bind+0x80/0x80 [ 2043.854630][T22533] ? netlink_ack+0x1170/0x1170 [ 2043.859416][T22533] ? netlink_deliver_tap+0x2e/0x1b0 [ 2043.864723][T22533] netlink_unicast+0x74d/0x8d0 [ 2043.869555][T22533] netlink_sendmsg+0x8ad/0xbd0 [ 2043.874390][T22533] ? netlink_getsockopt+0x550/0x550 [ 2043.879600][T22533] ? aa_sock_msg_perm+0x94/0x150 [ 2043.884642][T22533] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2043.889981][T22533] ? security_socket_sendmsg+0x7c/0xa0 [ 2043.895571][T22533] ? netlink_getsockopt+0x550/0x550 [ 2043.900795][T22533] ____sys_sendmsg+0x5be/0x970 [ 2043.905673][T22533] ? __sys_sendmsg_sock+0x30/0x30 [ 2043.910791][T22533] ? __import_iovec+0x315/0x500 [ 2043.915754][T22533] ? import_iovec+0x6f/0xa0 [ 2043.920341][T22533] ___sys_sendmsg+0x2a2/0x360 [ 2043.925135][T22533] ? __sched_text_start+0x8/0x8 [ 2043.930085][T22533] ? __sys_sendmsg+0x290/0x290 [ 2043.934916][T22533] __sys_sendmmsg+0x2c3/0x510 [ 2043.939614][T22533] ? __ia32_sys_sendmsg+0x80/0x80 [ 2043.944716][T22533] ? __ia32_sys_get_robust_list+0x100/0x100 [ 2043.950738][T22533] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2043.956742][T22533] ? lock_chain_count+0x20/0x20 [ 2043.961689][T22533] __x64_sys_sendmmsg+0x9c/0xb0 [ 2043.966579][T22533] do_syscall_64+0x4c/0xa0 [ 2043.971051][T22533] ? clear_bhb_loop+0x60/0xb0 [ 2043.975825][T22533] ? clear_bhb_loop+0x60/0xb0 [ 2043.980552][T22533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2043.986460][T22533] RIP: 0033:0x7feafe39ce59 [ 2043.990976][T22533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2044.010637][T22533] RSP: 002b:00007feaff2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2044.019064][T22533] RAX: ffffffffffffffda RBX: 00007feafe615fa0 RCX: 00007feafe39ce59 [ 2044.027140][T22533] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 2044.035136][T22533] RBP: 00007feafe432d6f R08: 0000000000000000 R09: 0000000000000000 [ 2044.043180][T22533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.051208][T22533] R13: 00007feafe616038 R14: 00007feafe615fa0 R15: 00007ffe73e47418 [ 2044.059203][T22533] [ 2044.062316][T22533] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2044.069603][T22533] CPU: 0 PID: 22533 Comm: syz.2.4922 Not tainted syzkaller #0 [ 2044.077057][T22533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2044.087116][T22533] Call Trace: [ 2044.090397][T22533] [ 2044.093322][T22533] dump_stack_lvl+0x188/0x24e [ 2044.097991][T22533] ? memcpy+0x3c/0x60 [ 2044.102034][T22533] ? show_regs_print_info+0x12/0x12 [ 2044.107223][T22533] ? load_image+0x400/0x400 [ 2044.111743][T22533] panic+0x2e5/0x730 [ 2044.115625][T22533] ? bpf_jit_dump+0xd0/0xd0 [ 2044.120119][T22533] __warn+0x2f8/0x4f0 [ 2044.124090][T22533] ? u32_change+0x1dfc/0x27e0 [ 2044.128756][T22533] ? u32_change+0x1dfc/0x27e0 [ 2044.133428][T22533] report_bug+0x2ba/0x4f0 [ 2044.137815][T22533] ? u32_change+0x1dfc/0x27e0 [ 2044.142508][T22533] handle_bug+0x3a/0x70 [ 2044.146763][T22533] exc_invalid_op+0x16/0x40 [ 2044.151286][T22533] asm_exc_invalid_op+0x16/0x20 [ 2044.156159][T22533] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 2044.161470][T22533] Code: f9 eb 59 e8 b6 88 1e f9 c6 05 31 97 a7 05 01 b9 10 00 00 00 48 c7 c7 a0 ac 8e 8b 4c 89 fe 48 c7 c2 20 ad 8e 8b e8 14 f7 e9 f8 <0f> 0b e9 ff ee ff ff e8 88 88 1e f9 eb 24 e8 81 88 1e f9 c6 05 a3 [ 2044.181074][T22533] RSP: 0018:ffffc90006446e40 EFLAGS: 00010246 [ 2044.187136][T22533] RAX: b61b7d8a42f1fc00 RBX: ffff88807a0960e0 RCX: 0000000000080000 [ 2044.195186][T22533] RDX: ffffc9001e005000 RSI: 0000000000007f1b RDI: 0000000000007f1c [ 2044.203155][T22533] RBP: ffffc90006446ff8 R08: ffffc90006446ac7 R09: 1ffff92000c88d58 [ 2044.211129][T22533] R10: dffffc0000000000 R11: fffff52000c88d59 R12: 0000000000000000 [ 2044.219184][T22533] R13: dffffc0000000000 R14: ffff888047bcd000 R15: 0000000000000020 [ 2044.227191][T22533] ? u32_get+0x370/0x370 [ 2044.231464][T22533] ? u32_get+0x370/0x370 [ 2044.235714][T22533] tc_new_tfilter+0x1160/0x1900 [ 2044.240575][T22533] ? tcf_proto_signal_destroying+0x240/0x240 [ 2044.246573][T22533] ? rcu_read_unlock+0x8c/0xa0 [ 2044.251360][T22533] ? tcf_proto_signal_destroying+0x240/0x240 [ 2044.257341][T22533] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2044.262467][T22533] ? tcf_proto_signal_destroying+0x240/0x240 [ 2044.268477][T22533] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 2044.273447][T22533] ? rtnetlink_bind+0x80/0x80 [ 2044.278125][T22533] ? mark_lock+0x94/0x320 [ 2044.282448][T22533] ? __lock_acquire+0x12f4/0x7d10 [ 2044.287522][T22533] ? verify_lock_unused+0x140/0x140 [ 2044.292740][T22533] ? netlink_sendmsg+0x654/0xbd0 [ 2044.297700][T22533] ? verify_lock_unused+0x140/0x140 [ 2044.302927][T22533] netlink_rcv_skb+0x1fb/0x450 [ 2044.307709][T22533] ? rtnetlink_bind+0x80/0x80 [ 2044.312404][T22533] ? netlink_ack+0x1170/0x1170 [ 2044.317173][T22533] ? netlink_deliver_tap+0x2e/0x1b0 [ 2044.322366][T22533] netlink_unicast+0x74d/0x8d0 [ 2044.327220][T22533] netlink_sendmsg+0x8ad/0xbd0 [ 2044.332022][T22533] ? netlink_getsockopt+0x550/0x550 [ 2044.337328][T22533] ? aa_sock_msg_perm+0x94/0x150 [ 2044.342264][T22533] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2044.347555][T22533] ? security_socket_sendmsg+0x7c/0xa0 [ 2044.353059][T22533] ? netlink_getsockopt+0x550/0x550 [ 2044.358279][T22533] ____sys_sendmsg+0x5be/0x970 [ 2044.363059][T22533] ? __sys_sendmsg_sock+0x30/0x30 [ 2044.368079][T22533] ? __import_iovec+0x315/0x500 [ 2044.372920][T22533] ? import_iovec+0x6f/0xa0 [ 2044.377409][T22533] ___sys_sendmsg+0x2a2/0x360 [ 2044.382073][T22533] ? __sched_text_start+0x8/0x8 [ 2044.386955][T22533] ? __sys_sendmsg+0x290/0x290 [ 2044.391742][T22533] __sys_sendmmsg+0x2c3/0x510 [ 2044.396416][T22533] ? __ia32_sys_sendmsg+0x80/0x80 [ 2044.401592][T22533] ? __ia32_sys_get_robust_list+0x100/0x100 [ 2044.407479][T22533] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2044.413476][T22533] ? lock_chain_count+0x20/0x20 [ 2044.418357][T22533] __x64_sys_sendmmsg+0x9c/0xb0 [ 2044.423215][T22533] do_syscall_64+0x4c/0xa0 [ 2044.427666][T22533] ? clear_bhb_loop+0x60/0xb0 [ 2044.432355][T22533] ? clear_bhb_loop+0x60/0xb0 [ 2044.437031][T22533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2044.442915][T22533] RIP: 0033:0x7feafe39ce59 [ 2044.447320][T22533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2044.466928][T22533] RSP: 002b:00007feaff2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2044.475340][T22533] RAX: ffffffffffffffda RBX: 00007feafe615fa0 RCX: 00007feafe39ce59 [ 2044.483472][T22533] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 2044.491448][T22533] RBP: 00007feafe432d6f R08: 0000000000000000 R09: 0000000000000000 [ 2044.499524][T22533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.507492][T22533] R13: 00007feafe616038 R14: 00007feafe615fa0 R15: 00007ffe73e47418 [ 2044.515476][T22533] [ 2044.518877][T22533] Kernel Offset: disabled [ 2044.523212][T22533] Rebooting in 86400 seconds..